Duo Mobile - Enrolling Biometric Based Auth with Duo Using Passkeys

Overview

You can register your devices biometrics to be used during login as an alternative to push notifications. This can only supplement having an already already hardware token or smartphone.

Supported Devices

• Windows 10 or later, with windows hello available and configured. Chome/Edge officially supported
• macOS 13 and Safari or Chrome 108
• iOS 16 or iPadOS 16
• Android 10 and later

Procedures

1. Access the Duo device self-service.  On a device or workstation with Touch or Face ID, open a web browser and go to: -- Note:  If on a Mac, you must use Google Chrome web browser.
   https://mfa-ss.auth.rpi.edu
2. Log in to Duo with your RPI email address and password.  If you have a previously enrolled device you will be prompted for Duo authentication and your currently enrolled device(s) will show.  Otherwise continue to Step 4 after clicking on Get started.

[Sign in screens, first showing a box to enter a RPI email, the second is asking for your password, third is a verified push example]

3.  Your currently enrolled devices will show as well as the option to add.  Click “Add a device”

[Screen showing a registered phone and a button to add a device.]

4.   At the 'Select an option' page, click on "Face ID / Touch ID", "Windows Hello" or "Android Biometrics". If no option exists, then its possible your device or browser is not supported. Check the supported devices list.

[A screen showing a list of options for setting different external authenticators up]

5.  Your device will prompt you to authenticate with your chosen method and then it will return you to the Duo page. 

6.  You should see a message the registration was successful

[A screen showing enrollment was successful]

[A screen with a box to enter your mobile number, and a link to setup a tablet]

7.  Login to the Duo Self Service portal to verify enrollment was successful.

References/Links 

None at this time.

Last Reviewed:   06-Aug-2024