These instructions are for users that are enrolled with Duo Multi-Factor Authentication (MFA). This additional authentication measure protects your account and OU systems from being accessed by hackers.
Who is Eligible?
Active Faculty or Staff
Overview
Why am I being required to use Duo MFA?
When large-scale password breaches happen – and they happen a lot – credentials are often sold and swapped in online marketplaces and hacking forums. MFA enhances the security of your account and prevents others from accessing it, even if they know your password. Additionally, MFA helps OU meet regulatory obligations for protecting confidential information and is so effective at preventing successful cyberattacks it is required by our cyber-insurance provider.
How will Duo change my authentication experience?
When logging into a Duo-protected site or application, such as webmail.oakland.edu, you will enter your username and password just as have always done. After entering your login information, Duo will require you to complete a second verification process using a device, such as a smartphone, linked to your Duo account. When using a smartphone, a notification is sent that allows for one click approval or you may opt for confirmation code sent by a text message which is then typed into the Duo prompt on your computer. If you add a landline, it will call that number, and you’ll need to be present to answer and press a button on the keypad. Regardless of which option you choose, once you complete the step, you proceed to the application you’ve logged into. Use the "Trust this browser" option to bypass the two-factor prompt when using the same device and web browser. Trusted sessions for Webmail will be remembered for 14 days while authentications for all other applications will be remembered for 1 day. If you do not select "Trust this browser" you will be prompted to use two-factor authentication for subsequent authentications that day.
Getting Started
Before using Duo MFA you must complete an enrollment process that links a device to your Duo account. To do this you will need the following:
- Mobile device such as a phone or tablet to install the Duo MFA app on
You will need access to this device each time you log into university resources. Therefore we strongly recommend enrolling:
- The mobile device, such as a phone or tablet, you routinely have on your person
- A minimum of two devices to ensure uninterrupted access, for example in the event of a lost or stolen mobile device
When accessing any Duo-protected site or application, such as Webmail or MySail, you will be automatically prompted to enroll. If you are already using Duo MFA, for example when accessing the VPN or Banner Admin pages, you are already enrolled; no further action is required on your part.
First Time Setup
- When you login to a site or application for the first time such as mysail.oakland.edu that is protected, you will be shown the Duo Prompt as shown below
- To begin the setup process you will have the option to set up the Duo Mobile application which is recommended or by using a phone number
- Regardless of which option you pick a phone number will need to be provided so that verification code can be given
- After entering in your phone number, Duo will have you confirm that the phone number is correct
- Once confirmed it will then prompt you to send a passcode to that phone number
- When the passcode has been received, type the provided numbers into the box provided and click on the button labeled "Verify" as shown below
- Now that your phone number has been added to your account, Duo will then prompt you to download the Duo Mobile app
Note: This is highly recommended as it is the easiest and most convenient way to authenticate your account when logging in.
- After downloading the Duo Mobile from the App Store or Google Play store, click on the button labeled "Next", this will then provide a QR code that can be scanned using your Duo Mobile app
Note: Do not scan the QR code below. It is for reference only
- When first opening the Duo Mobile app you will see a screen like the one below, click on the button labeled "Use a QR code" (this may require you to allow Camera access to the Duo Mobile app, if prompted please allow)
- Now that you have scanned the QR code, it will prompt you to enter in a name for your account and select "Save"
- Once saved, it will then bring you to the display dashboard for the Duo Mobile app which looks like below
- Returning to the browser page you were logging into, a message will then be displayed that Duo Mobile has been added and click the button labeled "Continue"
- Lastly, you will be prompted to login in using Duo and will receive a push notification from Duo Mobile on your cellular device
Adding Devices
- To add a device to your Duo account, you still will require access to your previous device or phone number in order to do so. First navigate to a Duo protected site or application and attempt to login,it should display a prompt like the one below. Once displayed, select the text towards to bottom labeled "Other options"
- After being selected a new prompt will be displayed showing all of the available devices/options that you can use to authenticate. At the bottom of the page, select the option labeled "Manage devices"
- Once selected, another prompt listing all of the available devices/options to authenticate to display. You must select one of these options since authentication is required in order to manage the devices associated with your account
- After verifying, you will be brought to a Duo dashboard that will show all of the current devices on your account. There are two ways from here that a new device can be added to your account by selecting either "I have a new phone" or "Add a device"
Adding a New Phone
- If you select "I have a new phone" a prompt similar to the one below will display. Select the button labeled "Get started" to begin adding your new phone
- After selecting the button, you will then be prompted to send a passcode to your current phone number to confirm ownership. When prompted click on the button labeled "Send me a passcode"
- Once the passcode has been sent, enter in the numbers and click on the button labeled "Verify"
- Now that you have been verified a prompt will be displayed to setup the Duo Mobile app, while this is not a required step it highly recommended as it is the easiest and most convenient way to authenticate your account when logging in.
- If you choose to do so you can follow the steps shown above under "First Time Setup" to set up Duo Mobile
Add a Device
- If you select "Add a device " a prompt similar to the one below will display. To start adding the device you can select between using the Duo Mobile app or using your phone number
- For further instruction, please refer to the steps above under "First Time Setup"
After Enrollment
After you have successfully enrolled in Duo no further action is required on your part at this time. UTS will be sending out additional communications prior to Duo MFA being enabled on additional services. Additional Duo information is available on our Knowledge Base page titled "Duo Two-Factor Authentication".
Enrollment Issues
If you do not receive a Duo prompt
You may have allowed Duo to trust your browser for 24 hours, the Duo prompt may not appear. You can force the Duo prompt to appear by accessing a Duo-protected site or application in either a private/incognito window in your preferred browser or in a different browser.
Additional Support
- OU Technology Center
- 44 Oakland Center
- Rochester, MI 48309-4479
- (248) 370-4357
- Office Hours: M-F 8:00am - 5:00pm