Duo Multi-Factor Authentication (MFA) Configuration Guide

This guide covers configuration options for Duo, which is Ithaca College's multi-factor authentication (MFA) tool. Duo requires an extra authentication step (most commonly done by approving a prompt on your smart phone) when logging into certain IC systems such as email. This extra step dramatically decreases the ability for someone to gain unauthorized access to your account.

Audience

This article is intended for anyone affiliated with IC who uses Duo. If you are not yet enrolled for Duo, see Introduction to Duo.

Platform

Apple iOS, Google Android, Microsoft Windows Phone, Other mobile phones, and landlines

Contents

Ithaca College highly recommends setting up at least two separate devices for MFA. This will help reduce the chances of not being able to access your account if your primary authentication device becomes lost or damaged.

Changing settings for an enrolled device(s)

  1. Log in at My Settings & Devices Portal for Duo.
  2. Authenticate using your preferred method.

Re-name, re-register, or delete devices

  1. Click Device Options for the device you wish to modify and select the action you would like to perform. Screenshot of the Duo device management portal showing an android phone and the "Device Options" button for modifying settings on the phone.

Notes:

  • Use the "Reactivate Duo Mobile" option when you replace your smart phone but keep the same phone number.
  • You cannot delete a device if it is the only one configured. If you wish to replace your only device, first add the replacemnet device, then remove the old one.

Change your default authentication method (if you have more than one method configured)

  1. Click to select the drop-down list next to Default Device.
  2. Click to select your preferred method.
  3. Click Save.

Change how Duo prompts you to authenicate

  1. Click to select the drop-down list next to When I log in.
  2. Click to select your preferred method.
  3. Click Save.

Adding an Additional Device

  1. Log in at My Settings & Devices Portal for Duo.
  2. Authenticate using your preferred method.
  3. Click + Add another device.

For iOS, Android, and Windows phones:

  1. Select the country for your mobile phone, and enter the complete phone number, including the area code.
  2. Click the checkbox to verify the number is correct and click Continue.
  3. Select the type of phone you have, and click Continue.
  4. On your Phone download the Duo Mobile App from your App Store. Image with Green background and centered white block letters spelling "DUO".
  5. Once you have downloaded the App onto your phone, Click I have Duo Mobile installed.
  6. On your Phone open Duo Mobile and tap the "+" button on the top right corner of the app Image displaying the settings bar of the Duo Mobile app with a red arrow pointing at a red box around the plus sign on the right side of the image.
    1. Duo Mobile may ask for permission to use your phone's camera, you should allow this, it is used to scan the QR code on your screen.
  7. Scan the QR code that is displayed on your computer. This will add a field called "Ithaca College" within the Duo Mobile App.
  8. Click Continue. You are now ready to use Duo.

For other cell phones

After clicking Continue, you will be redirected to the main My Settings & Devices Portal page. No further steps are required for registration.

  1. Select the type of tablet you have, and click Continue.
  2. On your Tablet download the Duo Mobile App from your App Store. Image with Green background and centered white block letters spelling "DUO".
  3. Once you have downloaded the App onto your phone, Click I have Duo Mobile installed.
  4. On your Tablet open Duo Mobile and tap the "+" button on the top right corner of the app. Image displaying the settings bar of the Duo Mobile app with a red arrow pointing at a red box around the plus sign on the right side of the image.
    1. Duo Mobile may ask for permission to use your phone's camera, you should allow this, it is used to scan the QR code on your screen.
  5. Scan the QR code that is displayed on your computer. This will add a field called "Ithaca College" within the Duo Mobile App.
  6. Click Continue. You are now ready to use Duo.
  1. Select the country for your Landline, and enter the complete phone number, including the area code.
    1. Fill out the extension if there is one.
  2. Click the checkbox to verify the number is correct and click Continue. You are now ready to use Duo.

**U2F Tokens only work for authentication with certain browsers**

  1. Make sure you are using either Chrome (version 41 or later) or Opera (version 40 or later). U2F Tokens do not currently work with other browsers.
  2. After selecting U2F Token, insert your token into your computer. Depending on the token; you may have to tap, insert, or press the button on your U2F authenticator to proceed.

If you need a hardware security token, these devices must be configured and added to your account by the service desk. Please contact the service desk at x4100, servicedesk@ithaca.edu, or stop by to have this set up.

Details

Article ID: 53
Created
Thu 7/20/17 5:07 PM
Modified
Mon 9/23/19 4:35 PM