Multifactor Authentication (DUO)
-
Duo Mobile on iOS
Install Duo Mobile Find the latest version of Duo Mobile in the App Store. Supported Platforms: The current version of Duo Mobile supports iOS 14.0 and greater. To see which version of Duo Mobile is installed on your device, open Duo Mobile and tap the menu icon. The app version will be displayed in the bottom left corner. Activate Duo Mobile for the First Time When you enroll in Duo for the first time and choose to add an iOS device or use Duo Push, you're shown a QR code to scan with the Duo Mobile app to complete activation. Launch Duo Mobile and step through the introduction screens. To proceed with adding your initial Duo account to Duo Mobile, tap Use a QR code. Use your camera to scan the QR code shown by Duo Enrollment in your browser. If you're prompted to allow Duo Mobile permission to use your device camera, please grant it. Give the new account a name to complete adding it to Duo Mobile. It's a good idea to take a few minutes to practice approving and denying Duo authentication requests if you haven't used Duo before. Tap Practice now to go through some training screens like this one. If you feel comfortable using Duo Mobile to log in to applications you can tap Skip. Respond to Duo Mobile even faster by enabling notifications. You'll see new Duo Push requests when they arrive at your device, and can approve or deny from the notification without opening the app. Tap Allow notifications to permit notifications from Duo Mobile in iOS settings. Return to the accounts list to exit the new account process. You'll see your newly-added Duo account in the accounts list. Now you're able to respond to Duo Push authentication requests, or generate passcodes to log in to applications. Duo Push If you choose to authenticate with Duo Push, you'll get a login request sent to your phone — just press Approve to authenticate. If you get a login request that you weren't expecting, press Deny to reject the request. You’ll be asked if this was a suspicious login. If you aren't trying to log into an application or service protected by Duo and don't recognize the request, tap Yes to notify your organization's Duo administrator. If you made a mistake or the login isn't suspicious, tap No to deny the request without reporting it. Duo Push and Notifications You can respond to Duo Push requests from the iOS lock screen or banner notification. The actions presented to you when you respond to the notification depend on your organization's Duo policy settings, such as whether or not you can approve the login request without PIN or biometric verification. Perform a firm longpress on the Duo Mobile notification from the lock screen to reveal the "Approve" or "Deny" actions. Tap an action and supply your passcode or biometric verification (face or fingerprint) to complete the action. When your screen is unlocked, long-press or swipe down on the Duo Mobile banner notification received to reveal the authentication actions. On devices that do not feature 3D Touch, swipe left on the Duo Mobile notification to reveal the actions. Face ID and Touch ID Your organization may require biometric verification when you approve a Duo Push request. You can approve Duo authentication requests with Face ID if your device supports it. The first time you receive a Duo Push request on your iOS device which requires biometric verification, you'll be prompted to grant Face ID permission to the Duo Mobile app. Tap OK to proceed. Scan your face in the same manner that you use to unlock your device to approve the Duo login request. If your first try isn't successful, tap Try Face ID Again to scan your face again. If you're not able to approve the login request with Face ID or if you did not grant Duo Mobile permission to use Face ID, you can approve the Duo authentication request using the device's passcode. If you're using a Touch ID capable iOS device you can scan your fingerprint to approve Duo authentication requests. If you're not able to scan your fingerprint using the Touch ID sensor you can also approve the Duo authentication request using the device's passcode. Duo Mobile Appearance Adaptive View The accounts list in Duo Mobile adapts to you. If you rotate your device into a landscape view, your Duo Mobile accounts list rotates as well. The individual accounts shown in the list change appearance as well, showing the full account information when you just have a few accounts, and switching to a minimized account view when you have many accounts to minimize scrolling in the app. Dark Mode Duo Mobile's dark mode depends on your iOS system settings. There is no in-app toggle to enable dark mode. If your device has the system-wide dark setting enabled, Duo Mobile automatically switches to dark mode. You can enable dark mode on iOS in a few different ways: Go to Settings → Display & Brightness → Appearance and select Dark. If you have an iPhone X or later, swipe down on the right side of the screen to open Control Center. Press and hold the Brightness control to access additional options, and tap the Dark Mode button. If you have an iPhone 8 or earlier, swipe up from the bottom edge of the screen to open Control Center. Press and hold the Brightness control to access additional options, and tap the Dark Mode button.
-
Duo Mobile on Android
Install Duo Mobile Find the latest version of Duo Mobile in Google Play. Supported Platforms: The current version of Duo Mobile supports Android 10 and greater. Duo does not provide official support for non-standard custom Android distributions like OnePlus, LineageOS, or ColorOS, nor is Duo Mobile supported for use on ChromeOS. To see which version of Duo Mobile is installed on your device, go to the Android Settings menu, tap Apps, then scroll down and tap Duo Mobile. The "App Info" screen shows the version. Activate Duo Mobile for the First Time When you enroll in Duo for the first time and choose to add an Android device or use Duo Push, you're shown a QR code to scan with the Duo Mobile app to complete activation. Launch Duo Mobile and tap Set up account. To proceed with adding your initial Duo account to Duo Mobile, tap Use a QR code. Use your camera to scan the QR code shown by Duo Enrollment in your browser. If you're prompted to allow Duo Mobile permission to take pictures and record video, please grant it. Give the new account a name to complete adding it to Duo Mobile. It's a good idea to take a few minutes to practice approving and denying Duo authentication requests if you haven't used Duo before. Tap Practice now to go through some training screens like this one. If you feel comfortable using Duo Mobile to log in to applications you can tap Skip. You'll see your newly-added Duo account in the accounts list. Now you're able to respond to Duo Push authentication requests, or generate passcodes to log in to applications. Duo Push If you choose to authenticate with Duo Push, you'll get a login request sent to your phone — just press Approve to authenticate. If you get a login request that you weren't expecting, press Deny to reject the request. You’ll be asked if this was a suspicious login. If you aren't trying to log into an application or service protected by Duo and don't recognize the request, tap Yes to notify your organization's Duo administrator. If you made a mistake or the login isn't suspicious, tap No to deny the request without reporting it. Duo Push and Notifications When the Duo Push notification shows up on your screen, tap where indicated to view the available actions: Approve or Deny. Tap Approve in the notification to finish logging in to the Duo-protected application. Tapping on the push request notification itself (instead of tapping the notification actions) takes you to the full Duo Push screen in Duo Mobile. If your phone is running Android 13 or later, you may need to enable Duo Push notifications. To enable Duo Push notifications: Press and hold on the Duo Mobile app icon and then select App info. On the following Duo Mobile app information screen, tap Notifications. Toggle All Duo Mobile notifications to on. Fingerprint Verification Duo Mobile also supports fingerprint verification for Duo Push-based logins as an additional layer of security to verify your user identity. If you're using a device with a fingerprint reader you'll need to scan your finger each time you authenticate via Duo Mobile (if required by your administrator). If you're not able to scan your fingerprint using the sensor you can also approve the Duo authentication request using the device's passcode (the same one you use on the Android lock screen). Duo Mobile Appearance Adaptive View The accounts list in Duo Mobile adapts to you. If you rotate your device into a landscape view, your Duo Mobile accounts list rotates as well. The individual accounts shown in the list change appearance as well, showing the full account information when you just have a few accounts, and switching to a minimized account view when you have many accounts to minimize scrolling in the app. Dark Theme Duo Mobile's dark theme depends on your Android system settings. There is no in-app toggle to enable dark theme. If your device has the system-wide dark setting enabled, Duo Mobile automatically switches to dark theme. You can enable dark theme on Android in a few different ways: Go to Settings → Display → Theme and select Dark Theme. Pull down the Android settings from the notification tray and tap Dark Theme.
-
Duo Mobile on Apple Watch
Apple Watch and Duo Mobile Duo supports two-factor login request approval and passcode generation from an Apple Watch. Apple Watch support requires Duo Mobile 3.8 or later. To see which version of Duo Mobile is installed on your device, open Duo Mobile and tap the menu icon. The app version will be displayed in the bottom left corner. You'll need to enable Apple Watch notifications for Duo Mobile. Open the Watch app on your phone, tap "My Watch", and scroll down then tap the entry for Duo. Enable "Show App on Apple Watch". Duo Push When you receive a two-factor push notification, you'll also see the notification on your paired Apple Watch if your phone is locked. Apple Watch’s Taptic Engine is a linear actuator inside the device that produces haptic feedback, meaning it literally taps you on the wrist whenever you receive an alert or notification. That means you’ll also feel a tap whenever a login request is sent via Duo Mobile, letting you quickly log in or deny the request. You can approve the two-factor authentication login request or deny the login request without ever touching your phone. If your organization requires Duo Push verification with a numeric code you can draw or narrate the code to approve the login request from your Watch. You'll only see the Duo request on your watch when your phone is locked. Notifications won't go to your Apple Watch when your phone is unlocked. Duo Passwordless push login requests can't be approved from an Apple Watch because passwordless push authentication requires that you complete an additional verification step — either biometric verification with Touch ID or Face ID or entering your device's screen lock PIN. The same additional verification step may be necessary for two-factor Duo Push authentication if your organization's Duo policy enforces it. In these situations, the Duo notification received on your Apple Watch instructs you to open Duo Mobile on your phone to view the request. Passcodes You can also generate passcodes from the Duo Apple Watch app. Simply launch the app from the watch and tap an account to generate a passcode for that account.
-
Authenticating With Duo Prompt
Authenticating with the Traditional Duo Prompt The Duo Prompt lets you choose how to verify your identity each time you log in. Using the Traditional Duo Prompt After completing Duo enrollment (or if your Duo administrator set you up to use Duo), you'll see the Duo Prompt the next time you perform a browser-based login to a web service or application protected with Duo. If you have more than one device enrolled, like a mobile phone and a hardware token, you'll see a device selector. Select the device you want to use and then choose your authentication method. Method Description Duo Push Pushes a login request to your phone or tablet (if you have Duo Mobile installed and activated on your iOS or Android device). Just review the request and tap Approve to log in. Call Me Authenticate via phone callback. Enter a Passcode Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. Click Send codes to get a new batch of passcodes texted to your phone. You can also use security keys for one-touch hardware-backed authentication. Your Duo administrator may have limited which authentication methods you can use to log in. If this is the case, then the Duo prompt shows only the allowed methods. So, if your organization disallows phone call for Duo logins, the prompt may only show the "Send Me a Push" and "Enter a Passcode" options. In the event that your organization restricts use of the authentication methods attached to your account, you'll see a message indicating this, with the option to enter a Duo bypass code. If you can't authenticate or aren't sure what to do, click Need help? on the left side of the Duo prompt. Your administrator may have customized the help text with additional instructions or contact information. Self-Service Options If your organization has enabled self-service you can add an additional authentication device by clicking the Add a new device link, or update your setting and remove authentication methods by clicking My Settings & Devices. Remembered Devices You'll also see a Remember me for... option if your administrator enabled Duo's remembered devices feature. If you check this box when authenticating you won't need to perform Duo second-factor authentication again for the duration specified on the prompt. Authenticating from Smaller Screens If you're logging in with Duo from a device with a smaller screen (like a tablet) or small browser window then your Duo Prompt may look slightly different. Don't worry! All the devices and options shown in the full-size prompt are available for use, and you can enroll and manage devices by following the same steps. Access Add a New Device or My Settings & Devices by clicking the Settings button at the top. Click the X on the Settings button to return to the Duo Prompt.
-
Cisco Duo - Managing Devices
This Article will explain how you can manage your Cisco DUO Devices via a portal. Login to Cisco Duo Central : https://sso-f7ee6fe7.sso.duosecurity.com/central/ Select Manage Devices (Upper Right) Authenticate via Duo Push w/ Additional Security (3 Digit Code) Select Add a Device Follow the prompts for the specific device you have, (Below is an example of what you'd see using a tablet)
-
Cisco Duo - Logging into an FCH Workstation
This Article will explain what to expect when logging into your physical workstation and using cisco Duo. This could be a laptop, Conference Room Computer or Scanning workstation. First, Your windows login will look like an ordinary windows login prompt Second, a prompt will come up but a push notification will automatically go to your Cisco Duo Push Enabled device Finally, Push Accept on your device and you will be logged in
-
Enrolling into Cisco Duo (Enrollment Email)
This Article Will show the step by step processing of enrolling into Cisco Duo from an enrollment email Before starting this process please, download the Cisco Duo Application on your smart device Step 1 Click the Link in the Enrollment Email Step 2 Click Next on the informational prompts Step 3 Choose Skip Now on Install Duo Device Health Step 4 Select Duo Mobile Option Step 5 Follow the steps to input a phone number or Select Tablet option Step 6 When Completed linking your device, select Continue Step 7 Skip this step Step 8 You are now enrolled into Cisco Duo
-
Cisco Duo - VPN Anyconnect
VPN Address: As before, open the VPN client but change the address to: vpn-appliance-bktqbzqnjd.dynamic-m.com When you enter your username and password, you will receive an automatic push or phone callback. Alternatively you may add a comma (",") to the end of your password and append a Duo factor option: push Perform Duo Push authentication. You can use Duo Push if you've installed and activated Duo Mobile on your device. A numeric passcode Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. Examples: "123456" or "2345678". For example, if you wanted to use a passcode to authenticate instead of Duo Push or a phone call, you would enter: username: bob password: hunter2,123456 You can also specify a number after the factor name if you have more than one device enrolled (as the automatic push or phone call goes to the first capable device attached to a user). So you can enter phone2 or push2 if you have two phones enrolled and you want the authentication request to go to the second phone.
-
Logging into VMware with Cisco Duo
Logging into VMware with Cisco Duo is a secure and efficient way to access your virtual environment. In this article, we will discuss the steps required to log in to VMware with Cisco Duo. Step-by-step guide to logging in to VMware with Cisco Duo Open your VMware Client and Connect to https://view.fchn.com Enter your username and password as usual. A Duo Push will be automatically generated to your mobile phone Approve the push notification on your mobile device. You will now be logged in to VMware with Cisco Duo. Alternate Option for Logging in Alternatively you may add a comma (",") to the end of your password and append a Duo factor option: push Perform Duo Push authentication. You can use Duo Push if you've installed and activated Duo Mobile on your device. A numeric passcode Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. Examples: "123456" or "2345678". For example, if you wanted to use a passcode to authenticate instead of Duo Push or a phone call, you would enter: username: bob password: hunter2,123456 Troubleshooting If you encounter any issues when logging in to VMware with Cisco Duo, try the following troubleshooting steps: Ensure that you have the latest version of the Cisco Duo app installed on your mobile device. Check that your mobile device has an active internet connection. If you are still unable to log in, contact the IT Service Desk for Assistance helpdesk@fchn.com 206-268-2424 Option #2 Conclusion Logging in to VMware with Cisco Duo is a simple and secure process that adds an extra layer of protection to your virtual environment. By following the steps outlined in this article, you can ensure that only authorized users can access your virtual machines. Screenshots
-
DUO Offline Passcode No Longer Recognized (Laptop Users)
**If you recently changed phones or laptops, you will have to resync. To resync your offline device in DUO, you will need to do the following. 1. Open your DUO app and delete the current Windows Offline option. (Tap on option, tap on the ... in the top right corner. Choose Delete.) 2. Sign Out, Lock, or Restart your laptop. 3. When you get to the DUO prompt pop up, there is a Replace/Reconnect Offline Device link on the left hand side. Click on that, follow the prompts, and scan the QR code. This will set up the Windows Offline option in the DUO app again. Verify the code and it is all resynced.