This document describes the options available to you when using Duo for two-factor authentication (2FA) with systems that require Duo two-factor and Weblogin-protected systems with two-factor turned on. Individuals who need to complete 2FA to log in to UMHS-specific services, including MiChart for Electronic Prescription of Controlled Substances (EPCS), will follow different documentation.
IMPORTANT: We recommend you enroll for a primary option plus at least one backup option. During each login session, you determine which registered method to use.
The options for Duo two-factor authentication include the following devices.
Smartphone
Enrolling the Duo Mobile app on a smartphone (a cell phone that allows you to download and install applications) gives you the greatest number of authentication options when you log in to a 2FA-protected system. Most people find the push notification the most convenient option.
-
Duo Mobile Push: From the login page, click Send me a Push, open the push notification on your smartphone, and tap Approve to log in. Requires WiFi or mobile data connection.
-
Duo Mobile Passcode: Open the Duo Mobile app on your smartphone and generate a passcode, enter your passcode on the login page, and click Log In. Does not require WiFi or mobile data connection.
-
Phone Call: From the login page, click Call Me, answer the call on your phone, and press 1 to log in.
-
Passcodes via Text Message: From the login page, click Enter a Passcode, click Text me new codes, and receive a text message that includes 10 passcodes. Enter your passcode on the login page, and click Log In. Ten passcodes are sent because each can be used only once. Passcodes expire after 12 hours.
Enroll a Smartphone or Tablet in Duo
Tablet
A tablet provides two options with the Duo Mobile app:
-
Duo Mobile Push: From the authentication page, click Send me a Push, open the push notification on your tablet, and tap Approve to log in. Requires WiFi or mobile data connection.
-
Duo Mobile Passcode: Open the Duo Mobile app on your tablet and generate a passcode. Then enter your passcode on the login page, and click Log In. Does not require WiFi or mobile data connection.
Enroll a Smartphone or Tablet in Duo
Other Cell Phone
Cell phones with text messaging and phone service provide two options:
-
Phone Call: From the login page, click Call Me, answer the call on your phone, and press 1 to log in.
-
Passcodes via Text Message: From the login page, click Enter a Passcode, click Text me new codes, and receive a text message that includes 10 passcodes. Enter your passcode on the login page, and click Log In. Ten passcodes are sent because each can be used only once. Passcodes expire after 12 hours.
Enroll a Landline or Non-Smart Cell Phone in Duo
Landline Phone
-
Phone Call: From the login page, click Call Me, answer the call on your phone, and press 1 to log in.
Enroll a Landline or Non-Smart Cell Phone in Duo
Duo Hardware Token
- From the login page, click Enter a Passcode. Press the button on your Duo hardware token to generate a passcode, enter your passcode on the authentication page, and click Log In. Hardware tokens are available for purchase from the Computer Showcase. A hardware token costs $25.
Hardware Tokens - Purchase and Enrollment
Emergency Bypass Code
In an emergency when you don't have any of your Duo options available to you, you can phone the ITS Service Center for an emergency bypass code.
Authentication Options Chart
One-page chart to help people decide which Duo options to use.
Future Possibilities
Some people have asked about the possibility of using third-party hardware tokens (e.g., YubiKey) with Duo. At this time we are not enrolling third-party hardware tokens, although the options are being reviewed.