Duo Mobile - Enrolling Biometric Based Auth with Duo Using Passkeys

Overview

You can register your devices biometrics to be used during login as an alternative to push notifications. This can only supplement having an already hardware token or smartphone.

Supported Devices

• Windows 10 or later, with Windows Hello available and configured. Chrome/Edge officially supported. For help getting started with Windows Hello see this article.
• macOS 13 and Safari or Chrome
• iOS 16 and iPadOS 16 or later
• Android 10 and later

Procedures

1. Login to the Duo device self-service site. On a device or workstation with Touch or Face ID, open a web browser and go to: https://mfa-ss.auth.rpi.edu
2. Login to Duo with your RPI email address and password.  If you have a previously enrolled device you will be prompted for Duo authentication and your currently enrolled device(s) will be shown.  Otherwise continue to Step 4 after clicking on Get started.

[Sign in screens, first showing a box to enter a RPI email, the second is asking for your password, third is a verified push example]

3.  Your currently enrolled devices will show as well as the option to add.  Click “Add a device”

[Screen showing a registered phone and a button to add a device.]

4.   At the 'Select an option' page, click on "Face ID / Touch ID", "Windows Hello" or "Android Biometrics". If no option exists, then its possible your device or browser is not supported. Check the supported devices list.

[A screen showing a list of options for setting different external authenticators up]

5.  Your device will prompt you to authenticate with your chosen method and then it will return you to the Duo page. 

6.  You should see a message the registration was successful

[A screen showing enrollment was successful]

[A screen with a box to enter your mobile number, and a link to setup a tablet]

References/Links 

• Setting up Windows Hello

Last Reviewed:   14-May-2025