Duo Mobile - Multi-Factor Authentication

Overview

How to enroll, authenticate and manage existing devices in Duo Mobile for Multi-Factor Authentication.

Procedures

To improve security access many RPI systems will require Multi-Factor Authentication using Duo Mobile.  This article will explain on how to install this on a smartphone and how to connect.  

First section will be installing and configuring.  Scroll down for managing existing devices including adding a new or additional device.

Installing and Configuring Duo Mobile

1. Go to App Store for iOS or Play Store for Android and download and install:  Duo Mobile

[image for Duo Mobile app]

Note -- Requires iOS 13 or above or Android OS 8 or above.  If you do not have a smart phone, tablet (iPad), Mac with Google Chrome using Touch ID OR you have an older smart phone, please reference the Hardware token section below:

How to find OS version:

• iOS:      Settings - General - About
• Android:     Settings - About Phone or About Device - Android Version

2. On a computer (not on your phone) open a web browser go to: 

https://apex.cct.rpi.edu/apex/f?p=119

NOTE:  If you are using a Mac with Touch ID you need to use Google Chrome as your browser

3. At the login screen login with your RCS userid and password

[login screen prompting for RCSid and password - click Login]

4. At the next few screens, you can click  Next through the information

 [Welcome to Duo Security screen showing Next button. Followed by 2 information screen explaining that two step protects accounts]

 

5. At the next screen, either choose "Duo Mobile" to begin setting up the app OR if you have a Mac with Google Chrome and Touch ID choose "Touch ID" and skip to step #16

6. At the next screens enter mobile phone number including area code - you will need to confirm the ownership of the number with a text or phone call. Once complete, click Continue.

*Note* If registering a tablet, skip to step 7

(enter phone number including area code)  (confirm number is correct)           (confirm ownership0                              (enter the passcode received)

 (added duo mobile screen - click continue)

 

7. At the next screen choose I have Duo Mobile Installed

8. Next screen will show an activation bar code.  Keep this screen open and continue with next steps.

9. Open Duo Mobile app on your phone/ tablet

10. Tap New to Duo - Add Account or Get Started or + (may be prompted to allow Camera permissions)

11. With your phone scan the activation barcode showing on your computer - click Continue

[screen showing device successfully added to duo]

12. At the next screen you can choose skip for now when offered to setup a security token.

[screen letting you move into security token step]

13. At the last screen you can click button for log in with Duo.

[screen showing successful registration]

14. You should now receive a push notification on your device to accept. During this you will see duo notifying you its waiting for your approval on your device.

[screen showing pending device push notification]

15. Duo gives you the option the trust the browser you are in. This will reduce the duo prompts you get for the day when accessing apps in this browser. If you are on your own computer choose Yes, trust this browser.  Otherwise choose No, do not trust this browser.

[screen showing option to trust browser.]

 

16. On a Mac with Google Chrome browser you will have an option to choose TouchID

• Next screen click Continue
• Welcome to Duo Security - click Next - Next - Next
• Select an option - click Touch ID (recommended)
• Touch ID - click Continue
• Create a passkey for duosecurity.com - click Continue
• Google chrome is trying to verify your identity on duosecurity.com - TouchID or enter your device password 
• Screen should say Added TouchID - click Continue
• Click Skip for Now
• Setup completed - click Login with Duo
• Use Touch ID to login
• Click Yes, trust browser -- Success logging you in

 

Logging in when prompted for a second password or a prompt for MFA

1. Logging int most MFA enable systems will automatically trigger a push notification to your device and you will not need to interact with the website. The site will redirect you back to the application after you accept the push.

[screen showing that it is waiting for you to accept push]

If you can not accept notification you can choose other options. Option options are having a code sent via phone call or text message to your registered mobile number, or enter the rotating code from your mobile app or hardware token. (see below for additional information on hardware tokens)

[screen showing other MFA options available]

Changing your Duo Settings and Devices - including adding a new or additional device

NOTE:  If you need to replace your old device and you do not have access to it, you will need to submit a Support Request to have helpdesk remove your old device from the server.  Please include your RIN for identity verification.

1. In a web browser go to: 
https://apex.cct.rpi.edu/apex/f?p=119

2. At the login screen login with your RCS userid and password

[login screen prompting for RCSid and password - click Login]

3.  IF you get prompted with an automatic Duo Push DO NOT accept and click on Other Options.

4. Select Mange devices.

[screen showing where to click to mange devices]

5. You need to verify your identify

[screen showing how to confirm id to change devices]

6. From here you can remove or enroll new devices.

 

 

If you need assistance with this please submit a Support Request

 

How to obtain and use a Hardware token to login with Multi-Factor authentication

1. Hardware tokens we are able to support are available to purchase at the Rensselaer Collegiate Bookstore for the price of $24.95.
2. Once you obtain a hardware token from the bookstore, please submit a Support Request providing your RIN for identity verification and the serial number that is on the back of the token.
3. Once we assign your hardware token to your account we will let you know it is ready.
4. When you are presented with a login requiring multi-factor authentication:
   1. Userid: RCSuserid
   2. Password: RCS password
   3. Second password  – hit the button on the token and enter the 6 digits, no spaces as your second password
      OR a notification to choose click Enter a Passcode - hit the button on the token and enter the 6 digits, no spaces as your second password

References

Duo Mobile Privacy Information: 

https://help.duo.com/s/article/4683?language=en_US

If you do not have the VPN installed:

https://itssc.rpi.edu/hc/en-us/articles/360008783172-VPN-Installation-and-Connection

How to login to the VPN using Duo Mobile - Multi-Factor Authentication

https://itssc.rpi.edu/hc/en-us/articles/360061226812-VPN-logging-into-the-VPN-using-Multi-Factor-Authentication-with-Duo-Mobile-app-prompt-for-second-password-

Additional references on Cisco Duo:

https://help.duo.com/s/article/2094?language=en_US

 

Last Reviewed: 20-Jan-2023