Overview
How to enroll, authenticate and manage existing devices in Duo Mobile for Multi-Factor Authentication.
Procedures
To improve security access many RPI systems will require Multi-Factor Authentication using Duo Mobile. This article will explain on how to install this on a smartphone and how to connect.
First section will be installing and configuring. Scroll down for managing existing devices including adding a new or additional device.
Installing and Configuring Duo Mobile
1. Go to App Store for iOS or Play Store for Android and download and install: Duo Mobile
[image for Duo Mobile app]
Note -- Requires iOS 13 or above or Android OS 8 or above. If you do not have a smart phone, tablet (iPad), Mac with Google Chrome using Touch ID OR you have an older smart phone, please reference the Hardware token section below:
How to find OS version:
- iOS: Settings - General - About
- Android: Settings - About Phone or About Device - Android Version
2. On a computer (not on your phone) open a web browser go to:
https://apex.cct.rpi.edu/apex/f?p=119
NOTE: If you are using a Mac with Touch ID you need to use Google Chrome as your browser
3. At the login screen login with your RCS userid and password
[login screen prompting for RCSid and password - click Login]
4. At the next few screens, you can click Next through the information
[Welcome to Duo Security screen showing Next button. Followed by 2 information screen explaining that two step protects accounts]
5. At the next screen, either choose "Duo Mobile" to begin setting up the app OR if you have a Mac with Google Chrome and Touch ID choose "Touch ID" and skip to step #16
6. At the next screens enter mobile phone number including area code - you will need to confirm the ownership of the number with a text or phone call. Once complete, click Continue.
*Note* If registering a tablet, skip to step 7
(enter phone number including area code) (confirm number is correct) (confirm ownership0 (enter the passcode received)
(added duo mobile screen - click continue)
7. At the next screen choose I have Duo Mobile Installed
8. Next screen will show an activation bar code. Keep this screen open and continue with next steps.
9. Open Duo Mobile app on your phone/ tablet
10. Tap New to Duo - Add Account or Get Started or + (may be prompted to allow Camera permissions)
11. With your phone scan the activation barcode showing on your computer - click Continue
[screen showing device successfully added to duo]
12. At the next screen you can choose skip for now when offered to setup a security token.
[screen letting you move into security token step]
13. At the last screen you can click button for log in with Duo.
[screen showing successful registration]
14. You should now receive a push notification on your device to accept. During this you will see duo notifying you it's waiting for your approval on your device.
[screen showing pending device push notification]
15. Duo gives you the option the trust the browser you are in. This will reduce the duo prompts you get for the day when accessing apps in this browser. If you are on your own computer choose Yes, trust this browser. Otherwise choose No, do not trust this browser.
[screen showing option to trust browser.]
16. On a Mac with Google Chrome browser you will have an option to choose TouchID
- Next screen click Continue
- Welcome to Duo Security - click Next - Next - Next
- Select an option - click Touch ID (recommended)
- Touch ID - click Continue
- Create a passkey for duosecurity.com - click Continue
- Google chrome is trying to verify your identity on duosecurity.com - TouchID or enter your device password
- Screen should say Added TouchID - click Continue
- Click Skip for Now
- Setup completed - click Login with Duo
- Use Touch ID to login
- Click Yes, trust browser -- Success logging you in
Logging in when prompted for MFA
1. Logging in to most MFA enable systems will automatically trigger a verify push notification to your device and you will not need to interact with the website. Go to your Duo mobile app on your phone to see the 3 digit code to enter into the website you are logging into.
If you have a hardware token, you choose other options to be prompted to enter the 6 digits showing on the hardware token (see below for additional information on hardware tokens). Help Desk will not provide a bypass code but if you need assistance, please submit a Support Request.
Changing your Duo Settings and Devices - including adding a new or additional device
NOTE: If you need to replace your old device and you do not have access to it, you will need to submit a Support Request to have helpdesk remove your old device from the server. Please include your RIN for identity verification.
1. In a web browser go to:
https://apex.cct.rpi.edu/apex/f?p=119
2. At the login screen login with your RCS userid and password
[login screen prompting for RCSid and password - click Login]
3. IF you get prompted with an automatic Duo Push DO NOT accept and click on Other Options.
4. Select Mange devices.
[screen showing where to click to mange devices]
5. You need to verify your identify
[screen showing how to confirm id to change devices]
6. From here you can remove or enroll new devices.
If you need assistance with this please submit a Support Request
How to obtain and use a Hardware token to login with Multi-Factor authentication
- Hardware tokens we are able to support are available to purchase at the Rensselaer Collegiate Bookstore for the price of $24.95.
- Once you obtain a hardware token from the bookstore, please submit a Support Request providing your RIN for identity verification and the serial number that is on the back of the token.
- Once we assign your hardware token to your account we will let you know it is ready.
References
Duo Mobile Privacy Information:
https://help.duo.com/s/article/4683?language=en_US
If you do not have the VPN installed:
https://itssc.rpi.edu/hc/en-us/articles/360008783172-VPN-Installation-and-Connection
How to login to the VPN using Duo Mobile - Multi-Factor Authentication
Additional references on Cisco Duo:
https://help.duo.com/s/article/2094?language=en_US
Comments
0 comments
Article is closed for comments.