Duo Two-Factor Authentication

Duo two-factor authentication adds a second layer of security to your  accounts. Verifying your identity using a second factor, like your smartphone, mobile device, hardware token ,or entering a security code, prevents anyone but you from logging in, even if they know your password. You'll login as usual with your username and password, and then use your device to verify that it's you. 

Table of Contents

Duo Security FAQ

Duo Device and Software Requirements

Duo Troubleshooting

Configuring Duo on a New Phone

Authenticate Using a Duo Passcode

Authenticate Using a Duo Token

My Primary Duo Authentication Device is Lost or Broken

Add an Additional Device to Duo Mobile

Using Duo with Cisco AnyConnect VPN

Use Duo Mobile to Protect Non-Davidson Accounts

Duo Security FAQ

Q: Why do I need Duo two-factor authentication? 

A: Recently, security professionals stated that one factor is not enough to protect important information. In order to improve the protection of sensitive data elements, they suggest that you use two-factor authentication (2FA), which requires:

1. Something you know (a password), and
2. Something you have (usually a mobile device)

Q: What services are protected with Duo?

A: All applications that offer SSO (single sign-on), such as Office 365, Google Drive/GSuite, Dropbox, Moodle, Zoom, Slate, and Maxient require Duo two-factor authentication. Additionally, VPN access from off-campus and confidential applications like Banner and Blackbaud require Duo.

 

Q: What devices are supported by Duo?

A: You can read our documentation on the devices supported by Duo. Further questions can be directed to the T&I Support Center at [e-mail] or 704-894-2900. 

 

Q: Once I have Duo, how can I authenticate?

A: There are several methods to authenticate in Duo:

• Duo Mobile Push
  If you use your smartphone or tablet, you can install the Duo Mobile app and send a notification to your device. To authenticate, you choose to Accept or Deny the request on your mobile device.
• Duo Mobile Passcode
  If you use your smartphone or tablet, you can install the Duo Mobile app and generate a temporary passcode from that app. This works even if you don’t have access to wifi or cell phone service.
• Using a provided Duo token
  If you cannot or will not use your mobile device to authenticate, the T&I Support Center can provide you with a Duo token. You will press a button on the token to generate a passcode that you can then enter in the portal.
• Using a personal hardware token/fob
  If you have a hardware token already (ex: Yubikey), you can insert the token like a USB and tap it to authenticate. 

Q: Do I need a smartphone to use Duo? What if I don’t have a smartphone?

A: If you have a smartphone, you’ll find it makes Duo more convenient.

• You probably already have your smartphone with you, and it’s easy and quick to acknowledge a login through the Duo app. 
• You can choose to use the Duo app for two-factor protection on personal services like Gmail, Instagram, Facebook, and other sites. 
• If you do not own a compatible smartphone, T&I will provide one Duo key fob (for students) or one authentication key (faculty/staff) at no cost.
  

Q: My account is locked out. What should I do?

A: If you exceed 10 failed login attempts, your account will be locked down. Please contact the T&I Support Center at ti@.davidson.edu or 704-894-2900 for assistance. 

  

Q: How can I authenticate in Duo Mobile if I don’t have access to cell signal, data, or a WiFi connection? 

A: In your Duo Mobile app, you can generate passcodes which don’t require access to cell signal, data, or WiFi. For more information, see How to Authenticate using a Duo passcode. 

 

Q: I lost or broke my primary authentication device. What should I do?

A: Please take action ASAP if you’ve lost your phone so that no unauthorized person(s) can access your account. See our detailed instructions here.

 

Q: How do I add an additional device?

A: Go to duo.davidson.edu, log in with your Davidson College credentials, and select Manage Devices

 

Q: I purchased a new phone. How do I set up my new device?

A: If you still have access to your old device or a backup authentication device, go to duo.davidson.edu and click on manage devices.  If you do not have access to your old device or backup device, you can contact the T&I Support Center at 704-894-2900 for assistance.

 

Q: I’m having trouble authenticating in Duo. What should I do?

A: Please see our Duo Troubleshooting article for solutions to some common authentication problems. If you still have questions or concerns, please contact the T&I Support Center at [e-mail] or 704-894-2900.

 

Q: I already log in to services frequently. Will this slow down my work or studies?

A: We hear you, and we’re working to make login faster and more efficient. 

• T&I is moving our most widely used services (including email, Dropbox, Moodle, Google Suite, Zoom and more) to a common login experience, so you won’t be prompted to log in as often. More services, like Banner Self-Service, will join this login experience over the course of the year.
• With the roll-out of Duo for everyone, you’ll be able to opt for Duo to “remember me” when you sign in. This will reduce the number of Duo prompts you receive on that device. 
• We are working to improve the ease of accessing services in other ways. For instance, we are evaluating ways to make a number of IT services available from off-campus without VPN later this academic year. 

Duo Device and Software Requirements

For security reasons, users are required to keep their devices up-to-date. If you are a high-risk user, you will be required by Duo to do so. 

You will be warned, and perhaps blocked, whenever your OS, Flash and/or Java plugins, or browser are out of date. If you are blocked, please contact the Support Center.

Please note that these are the minimum requirements and that it's always a good idea to keep your devices up-to-date.

Mobile Device Requirements

Device Type	Supported Platform
iOS	iOS 11.0 or newer
Android	Android 7.0 (Nougat) or newer

OS and Software Requirements

All users will be warned whenever your OS, Flash and/or Java plugins, or browser are out-of-date and blocked if they do not meet the following requirements:

Browser	No more than 1 year out of date
Flash and Java plugins	No more than 1 year out of date
Windows OS	At least Windows 7
macOS	At least Mac OS X 10.14 Mojave

 Duo Troubleshooting

If you are having difficulties with Duo, read about some of the common issues below to help troubleshoot.  

If you are using Duo Mobile, does your phone have a screen lock?

For security reasons, Duo requires that high-risk users have some type of mobile device screen lock whether it’s a pattern, passcode, biometric, etc.  

 

Is the date and time on your device correct? 

In order to authenticate properly, the date and time on your device needs to be correct. You can typically set your device to automatically adjust the time settings.

 

Are your browser, plugins, and operating system up-to-date?

Duo requires that you keep your chosen browser, plugins, and operating system up-to-date in order to authenticate. Read the article below for Duo requirements for your browsers, plugins, and operating systems: Duo Browser, Plugin, and OS Requirements

 

Is your Duo Mobile app updated?

All high-risk users are required to have up-to-date security updates for Duo Mobile.

 

Configuring Duo on a New Phone

New Phone? No problem! If you still have your old device, you can use the instructions below to activate Duo on your new device. 

From‌ ‌a‌ ‌desktop‌ ‌or‌ ‌laptop‌ ‌computer,‌ ‌go‌ ‌to‌ ‌‌outlook.davidson.edu‌‌. Enter your Davidson email address and password when prompted.  You will then automatically be redirected to Duo. 
 ‌

1. Click‌ ‌on‌ ‌the‌ ‌“Add‌ ‌a‌ ‌new‌ ‌device”‌ link on the left menu ‌to‌ ‌continue. ‌

 

2. Choose‌ ‌a‌ ‌method‌ ‌to‌ ‌authenticate‌ ‌with‌ ‌Duo.‌ ‌

If‌ ‌you‌ ‌do‌ ‌not‌ ‌have‌ ‌your‌ ‌old‌ ‌device,‌ ‌please‌ ‌contact‌ ‌T&I‌ ‌at‌ ‌‌704-894-2900.‌

Note:  iOS users:  If you activated iCloud Keychain on your old device, you can add a new device to Duo, even if you don't have your old phone.  ‌Click here for more information.

3. Choose‌ ‌the‌ ‌type‌ ‌of‌ ‌your‌ ‌new‌ ‌device,‌ ‌and‌ ‌click ‌Continue.‌ ‌Follow‌ ‌the‌ ‌instructions‌ ‌to‌ ‌

download‌ ‌the‌ ‌Duo Mobile app‌. ‌

4. (Mobile‌ ‌Phone‌ ‌Only)‌ ‌If‌ ‌your‌ ‌new‌ ‌device‌ ‌is‌ ‌a‌ ‌mobile‌ ‌phone,‌ ‌verify‌ ‌your‌ ‌phone‌ ‌by‌ ‌clicking‌ ‌

on‌ ‌Text‌ ‌me ‌and‌ ‌enter‌ ‌the‌ ‌verification‌ ‌code‌ ‌you‌ ‌received‌ ‌via‌ ‌text‌ ‌message.‌

 ‌

5. Select‌ ‌the‌ ‌type‌ ‌of‌ ‌phone‌ ‌you‌ ‌have‌.

6. Install‌ ‌the‌ ‌Duo‌ ‌Mobile‌ ‌App‌ ‌,‌ ‌if‌ ‌you‌ ‌haven’t‌ ‌done‌ ‌so‌ ‌already.‌ ‌

 

 

7. On your new phone, open the Duo mobile app, press the + button at the top, and scan the barcode on your computer screen. 

 

 You should now see Davidson College listed in your Duo mobile app on your new device.

 

Authenticate Using a Duo Passcode

Duo passcodes work without an internet connection. If your mobile device does not have cell signal, data, or a WiFi connection, the mobile passcode option will still allow you to authenticate.

Supported Browsers: Chrome, Firefox, Safari, and Internet Explorer 8 or later.

1. Click the dropdown above Send me a Push to choose your preferred authentication device.                                                                                                                                                                                 
                                                              
2. You can choose to remember your device for a period of time
   
                                                                                                                                                                               
3. Choose Enter a Passcode
   
   
4. Go to your Duo Mobile App and click the key icon next to your Davidson account. It will generate a one-time authentication code. Note: this authentication option will work regardless of whether you have mobile service or access to WIFI
   
        
                                                                     
5. Enter the given passcode.

Authenticate Using a Duo Token

Supported Browsers: Chrome, Firefox, Safari, and Internet Explorer 8 or later.

1. Visit the site protected by Duo.
   
   
2. Click the Device dropdown to choose your preferred authentication device.                                                                                                                                                                                                                                                                                
3. You can choose to remember your device for a period of time.
   
                                                                                                                                                                                 
4. Choose Enter a Passcode.
   
   
5. Click the green button on your Duo token. It will generate a one-time passcode.
   
   
6. Enter the passcode into the Duo portal.  

My Primary Duo Authentication Device is Lost or Broken

We recommend that you follow these instructions ASAP if you’ve lost your device so that no unauthorized person(s) can access your account. 

If you DO NOT have a backup authentication device:

Contact the T&I Support Center ASAP so that we can: 

• Delete the device from your account 
• Set you up with a temporary Duo token for authentication until you find or replace your lost device
  
  

If you have a backup authentication device:
Examples include Touch ID, U2F Key, or a secondary device with Duo Mobile installed, such as an iPad

1. Visit duo.davidson.edu and select manage devices.                                                                                                                                                                
2. Next to the lost device, choose Delete Device so that no unauthorized person(s) can authenticate into your account. You will need to use your backup device for authentication until you find your old device or purchase a new device. 

Add an Additional Mobile Device to Duo Mobile

We recommend that you add a second device in Duo in case you forget or lose your primary authentication device. 

1. On any computer, visit duo.davidson.edu and click on "manage devices"
2. Authenticate with Duo
3. Select + Add another device
4. On the What type of device are you adding? dialog box, click on the appropriate radio button and then click on the Continue button.

Mobile phone

• Enter your cell phone number
• Confirm you entered your phone number correctly via the check box
• Click on the Continue button
• Select the type of phone (iOS or Android)
• Click on the Continue button
• Install Duo on the new mobile phone (if you haven't already), scroll down in the dialog box and click on the I have Duo Mobile button
• On the new mobile phone:
  - Open the Duo Mobile app
  - Tap the + button
  - Use the camera on your device to scan the barcode on the screen

Tablet

• Select the type of tablet (iOS or Android)
• Click on the Continue button
• Install Duo on the new tablet (if you haven't already), scroll down in the dialog box and click on the I have Duo Mobile button
• On the new tablet:
  - Open the Duo Mobile app
  - Tap the + button
  - Use the camera on your device to scan the barcode on the screen 

Using Duo with Cisco AnyConnect VPN

If you are abroad, you should be able to authenticate as usual by using Duo. If you do not have access to cellular service, you must choose the Enter a passcode option to authenticate using the Duo Mobile app.

To use VPN, you'll need the Cisco AnyConnect application on your Windows or Mac computer. Download Cisco AnyConnect

1. Open Cisco AnyConnect. If this is your first time connecting to Davidson, enter vpn.davidson.edu in the text field.
   
   
2. Press Connect. 
3. Choose the appropriate Group for your needs:
   
   04-Tunnel (Highly recommended on public WiFi or an unknown network) encrypts and protects all your traffic. This improves privacy and security, but commercial Internet sites will load more slowly. Use this when traveling or in public or untrusted locations like coffee shops, airports, and hotels.
   
   01-Regular encrypts and protects only communications between you and the Davidson campus. This improves your Internet speed but is less secure, so use this from a trusted network like your home when you only need to securely access on-campus resources.
4. Enter your username (without @davidson.edu) in the Username field, then enter your account password under Password as shown below.
   
   
5. In the Second Password field, you'll enter one of two options for Duo. 
   
   Option 1: Type push to authenticate with a Duo push on your phone. Confirm the application and location before pressing Approve.
   
   Option 2: Type your six-digit passcode generated by your Duo Token or the Duo Mobile App. This option can be useful if you don't have access to cellular data (while abroad, for example).

After the first time you connect to vpn.davidson.edu using Duo, you will see that hostname replaced by VPN. Use VPN from off-campus.

If you experience any problems connecting, please close your AnyConnect client and restart the application.

Use Duo Mobile to Protect Non-Davidson Accounts

The Duo Mobile Application can not only provide a second factor for Davidson-protected services, but it can also generate passcodes to act as a second factor for other applications you might want to protect like a password manager or online banking account. 

1. Check to see if your service offers two-factor authentication (2FA). Here are some of the common applications that offer 2FA:                                                                                                                  

   Google	Amazon
   LastPass	Twitter
   Dropbox	Facebook

2. Under their 2FA options, choose Authenticator App or Code Generator App. The service should generate a QR code. 
   
   
3. Open the Duo Mobile App on your mobile device. 
4. Press the + button in the upper right hand corner, and scan the QR code. A new account should be added to your Duo Mobile App.                
   
   
5. To complete 2FA setup, the service should ask you for a confirmation code. Press the key next to your account in your Duo Mobile App and it will generate a 6-digit passcode.   
   
   
6. From then on out, whenever you log in to that service, it should ask you to enter a 6-digit passcode from the Duo Mobile App.