This document provides instructions for enrolling your mobile device in Duo so you can use it for two-factor authentication (2FA) with systems that require Duo two-factor and Weblogin-protected systems with two-factor turned on. Individuals who need to complete 2FA to log in to UMHS-specific services, including MiChart for Electronic Prescription of Controlled Substances (EPCS), will follow a different enrollment process.
Before You Begin
- You need a desktop or laptop computer on which to do the enrollment steps.
- You need your smartphone or tablet on which you will download the Duo Mobile app and activate it. Duo Mobile can be downloaded on the following types of devices: iOS (iPhone or iPad), Android (smartphone or tablet), Windows phone, or Blackberry. It is not available on Kindle tablets.
- We recommend that you enroll in both a primary and backup method for two-factor authentication.
- U-M will only use your phone number for the Duo service, and you can modify or remove it from the system at any time. If you don't wish to provide your phone number when configuring your smartphone, you can enroll it as a tablet.
- Not sure which option you want to use? Refer to Options for Two-Factor Authentication for more information.
Install the Duo Mobile App
- On your mobile device, download and install the free Duo Mobile app from your device’s app store. For detailed steps, refer to Installing the Duo Mobile App.
Register Your Device
- From a desktop or laptop computer, go to the appropriate web page below and complete the login steps as follows:
- Ann Arbor, Dearborn, and Flint Campuses:
- Go to UMICH Account Management.
- Click Log in on the upper-right corner of the page.
- Log in with your uniqname and UMICH password.
- Click the Two-Factor (Duo) link or tab.
- Click Manage Devices.
- U-M Health System:
- Go to User Profile Page.
- Log in with your uniqname and Level-2 password.
- Click the Security Setting tab at the top of the User Profile Page.
- Click the Two-Factor Settings tab.
- Ann Arbor, Dearborn, and Flint Campuses:
- If this is the first time you are enrolling, click Start setup.
- If you already enrolled another device or phone number:
- Complete a two-factor prompt (i.e., Send Me a Push, Call Me, or Enter a Passcode).
- Then click + Add another device on the My Settings & Devices page.
- To enroll a smartphone, select Mobile phone, or, to enroll a tablet, select Tablet, then click Continue.
- If you are enrolling a smartphone:
- Enter your device's phone number (tablet users will skip this step automatically).
- Click the checkbox to verify it’s the correct number.
- Click Continue.
Note: If you are enrolling a shared phone, you may need to complete an extra verification step. Follow the onscreen prompts to do so.
- Choose your device's operating system, then click Continue.
- Click I have Duo Mobile installed.
- Open the Duo Mobile app on your device.
- Use the Duo Mobile app’s built-in barcode scanner to scan the barcode on screen.
Note: If you have a Blackberry OS smartphone, you will not use a barcode scanner. Instead, enter your email address as prompted on screen and click Send Email. Using your phone, open the email message and click the activation link.
- Click Continue.
- If desired, select a different option in the When I log in drop-down list.
Important! The default is Ask me to choose an authentication method, which means you will need to initiate an authentication prompt when you log in (e.g., click Send me a Push or Call Me). The other options are Automatically send this device a Duo Push or Automatically call this device.
- To add another device, click + Add another device and repeat the enrollment steps based on the type of device:
- Enroll a Landline or Non-Smart Cell Phone in Duo: Begin at step 4.
- Enroll Another Smartphone or Tablet in Duo: Download the Duo Mobile app and then return to step 4 of this procedure.
Verify Enrolled Device
- If you want to test the device you just enrolled, click the Two-Factor (Duo) tab and then click Manage Devices. You will be prompted to complete two-factor authentication to access your device settings.