Duo Mobile - Enrolling in Duo Mobile for Multi-Factor Authentication – DotCIO - IT Services and Support Center

Overview

How to enroll, authenticate and manage existing devices in Duo Mobile for Multi-Factor Authentication.

Procedures

To improve security access many RPI systems requires Multi-Factor Authentication using Duo Mobile. This article will explain on how to install this on a smartphone and how to connect.

Help Desk will not provide a bypass code but if you need assistance with any of this process, please submit a Support Request

First section will be installing and configuring. Refer to References section at the bottom for additional options including managing existing devices or adding a new or additional device.

Note: If you are trying to enroll a second account with the same phone number and get an error (for example an employee who now also has a student account), you will need to submit a Support Request for assistance.

Installing and Configuring Duo Mobile

1. Go to App Store for iOS or Play Store for Android and download and install: Duo Mobile

[image for Duo Mobile app]

Note -- Requires iOS 13 or above or Android OS 8 or above. If you do not have a smart phone, tablet (iPad), Mac with Google Chrome using Touch ID OR you have an older smart phone, please reference the Hardware token section below:

How to find OS version:

iOS: Settings - General - About
Android: Settings - About Phone or About Device - Android Version

2. On a computer (not on your phone) open a web browser go to:

https://apex.cct.rpi.edu/apex/f?p=119

NOTE: If you are using a Mac with Touch ID you need to use Google Chrome as your browser

3. At the login screen login with your RCS userid and password

[login screen prompting for RCSid and password - click Login]

4. At the next few screens, you can click Next through the information

[Welcome to Duo Security screen showing Next button. Followed by 2 information screen explaining that two step protects accounts]

5. At the next screen, either choose "Duo Mobile" to begin setting up the app OR if you have a Mac with Google Chrome and Touch ID choose "Touch ID" and skip to step #16

6. At the next screens enter mobile phone number including area code - you will need to confirm the ownership of the number with a text or phone call. Once complete, click Continue.

*Note* If registering a tablet, skip to step 7

(enter phone number including area code) (confirm number is correct) (confirm ownership0 (enter the passcode received)

(added duo mobile screen - click continue)

7. At the next screen choose I have Duo Mobile Installed

8. Next screen will show an activation bar code. Keep this screen open and continue with next steps.

9. Open Duo Mobile app on your phone/ tablet

10. Tap New to Duo - Add Account or Get Started or + (may be prompted to allow Camera permissions)

11. With your phone scan the activation barcode showing on your computer - click Continue

[screen showing device successfully added to duo]

12. At the next screen you can choose skip for now when offered to setup a security key.

[screen letting you move into security token step]

13. At the last screen you can click button for log in with Duo.

[screen showing successful registration]

14. You should now receive a push notification on your device to accept. During this you will see duo notifying you it's waiting for your approval on your device.

[screen showing pending device push notification]

15. Duo gives you the option the trust the browser you are in. This will reduce the duo prompts you get for the day when accessing apps in this browser. If you are on your own computer choose Yes, trust this browser. Otherwise choose No, do not trust this browser.

[screen showing option to trust browser.]

Logging in when prompted for MFA

1. Logging in to most MFA enable systems will automatically trigger a verify push notification to your device and you will not need to interact with the website. Go to your Duo mobile app on your phone to see the 3 digit code to enter into the website you are logging into.

If you have a hardware token, you choose other options to be prompted to enter the 6 digits showing on the hardware token (see below for additional information on hardware tokens).