Body
Purpose:
Two-Factor Authentication (2FA), also known as Multi-Factor Authentication (MFA), adds an extra layer of security beyond your username and password.
It requires:
- Something you know (your password)
- Something you have (such as the Duo Mobile app on your smartphone)
Even if someone obtains your password, they cannot access your account without the second factor. Duo enhances your existing login process by requiring this additional verification step.
Why Use Two-Factor Authentication?
2FA is one of the most effective ways to protect your account from unauthorized access. It is simple to use and widely adopted across services like online banking and retail websites.
Duo allows you to verify your identity using:
- Push notifications
- Text messages
- Phone calls
- Passcodes generated by the Duo Mobile app
Which UHD Applications Require Duo?
Currently, Duo authentication is required for Office 365 web applications, including:
- Outlook Web Access (OWA)
- OneDrive
- Microsoft Teams
Additional applications may be added in the future.
How Does Duo Protect My Privacy?
Duo is designed with user privacy in mind and only collects the minimum information required for authentication.
For more details, please review the Duo Mobile Privacy Information.
Accessibility Features
Duo supports a wide range of accessibility features:
- Compatible with screen readers and voiceover tools
- Works with modern browsers (Chrome, Safari, Firefox, Edge)
- Supports text-to-speech and alternative navigation on iOS and Android
For more information, refer to the Accessibility and Duo webpage
How to Fix:
Using Duo While Traveling Internationally
Duo can be used even without cellular service or Wi-Fi. Available options include:
1. Duo Mobile Passcode
- Open the Duo Mobile app
- Tap the dropdown next to University of Houston–Downtown
- Use the generated passcode
2. Hardware Token
- Recommended for frequent travelers without smartphones
- Displays a passcode for login authentication
3. Bypass Codes
- Temporary codes provided by the IT Service Desk
- Useful if no other method is available
4. Standard Methods
- Push notifications, phone calls, and passcodes all work internationally if connectivity is available
Setup Process
What Do I Do After Enrollment?
After enrolling:
- Log in to Office 365
- Enter your username and password
- Complete Duo authentication when prompted
Note: You may need to log out and back in after enrollment.
Duo Enrollment
Visit the Duo Enrollment Guide for step-by-step instructions.
Multiple UHD Accounts
If you have multiple UHD accounts:
- Each account must be enrolled in Duo
- You may use the same phone number for all accounts
Download the Duo Mobile App
Duo mobile for Android devices
Duo mobile for Apple devices
How to Set Up Duo on Your Smartphone
All users will get an automated email from Duo Security containing a device registration link. If you receive an email, it is recommended to do the setup on a browser on a computer. You will eventually need to scan the QR code with your phone if you are putting the app on your phone.
When you click on the email registration link, the setup process will begin:
Click Start Setup to begin.
Pick what type of device you will be using and click Continue. This guide is focused on mobile phones. For additional guides, please visit Duo Guides.
Enter your phone number and click Continue. A checkbox may appear to verify the phone number entered.
Verify what type of phone (iPhone, Android, Windows Phone, other) you are using and click Continue.
If this is the first time you are enrolling in Duo, and you need to install the app, now is the time. Then click I have Duo Mobile installed.
DUO mobile for Apple devices
Duo mobile for Android devices
Once installed, scan the QR code given and click Continue.
Choose what you want it to do when you log in and click Saved then Finish Enrollment.
Set up is now complete.
If you are logged into any Office 365 applications, make sure you log out and log back in again.
What should I expect when I choose the Duo Send Me a Push option?
A login request will be sent to your phone. You may Approve or Deny the login request. (Standard data charges may apply.)
Tap Approve to finish logging in to the Duo-protected application.
Not expecting a Duo push notification?
If you get a login request that you weren't expecting, tap Deny on the notification on the full Push screen to reject the request.
You will be asked a reason why you are denying the push:
- It seemed fraudulent, rejected the login attempt, and also notified your Two-Factor Authentication administrator about the suspicious request.
- It was a mistake to deny the request without reporting it.
What should I expect when I choose the Duo Enter a Passcode option (Text)?
When you are prompted to choose an authentication method, choose Enter a Passcode.
At the bottom, you will get a blue box and click on Text me new code. You will receive a text with a temporary passcode that will allow you to log in. (Standard text message rates may apply.)
How do I use the Duo Hardware Token to authenticate?
Refer to the Duo Hardware Token guide for setup and usage instructions.
What is a Duo Hardware Token?
- A physical device that generates login passcodes
- Available for purchase ($24.00) through the CougarByte Store.
- Recommended for users without smartphones
To use your hardware token, please follow these Duo Hardware Token Guidelines.
A security key plugs into your USB port, and when tapped or when the button is pressed, it sends a signed response back to Duo to validate your login. Duo uses the U2F and WebAuthn standards to interact with your security keys. You may also see WebAuthn referred to as "FIDO2".
What are the Security Key Requirements?
In order to use a security key with Duo, make sure you have the following:
- A supported browser (Chrome 70, Firefox 60, Safari 13 or later), or Microsoft Edge 79 or later. Support for authentication is limited to web applications that show Duo's inline browser prompt.
- An available USB port. Be sure to check whether you have a USB-A (square) or a USB-C (smaller and more rounded)
- A supported USB security key. WebAuthn/FIDO2 security keys from Yubico or Feitian are good options. U2F-only security keys (like the YubiKey NEO-n) can't be used with Firefox.
Set a Default Authentication Method
To automatically send a Duo Push:
- Open an incognito browser window
- Log in to Office 365
- Select My Settings & Devices
- Choose your default device
- Set When I log in to Automatically send this device a Duo Push
- Click Save
Can I switch my cell phone or make other changes to my DUO account settings?
Visit our Duo Settings Portal to adjust your Duo account. The portal will allow you to:
- Add a new device
- Modify existing Devices
- Reactivate Duo mobile - (good when you update your app)
- Delete
- Change Name
- Change your default device
- Set a default authentication method
- Access the full Duo Guide
- Access the UHD Duo page
The Duo app wants access to my camera. Why?
This permission requires you to explicitly grant permission for Duo Mobile to use your camera during the enrollment process to scan QR codes that are used to quickly add multi-factor authentication accounts. You can deny this permission and enter the code manually, and you can remove permission to the camera after enrollment is completed. Duo Mobile will never access your photos and will not use your camera without explicit permission. Read more about Duo Mobile permissions.
Not Receiving Push Notifications
Check if:
- Your device is on Do Not Disturb
- Notifications are enabled for Duo Mobile
Security Warning in Duo Mobile
Duo may alert you to potential security risks on your device.
- Tap the notification for details
- Follow recommended steps to improve device security
- Updates can be completed later if needed
Additional Information:
Need additional information or assistance? Contact the itservicedesk@uhd.edu
Q&A: