Duo Two-Factor Authentication (for University employees)

Setting Up Duo

The following instructions guide you through the Duo enrollment and device set-up process.

In order to enroll in Duo, you must click on the enrollment link sent to you via your Ship email account.

1. Click Start setup when prompted with the Duo enrollment window.
   (You will get this prompt by either clicking on the link the Duo enrollment email you should have received or when attempting to log into a Duo protected application without being enrolled.)
   
   
   
   
2. Select the type of device you'd like to enroll and click Continue.
   
   
   
   - We recommend using a smartphone for the best experience. If you use a smartphone, you will need to install the Duo mobile app.
   - The following instructions guide you through the smartphone setup (you can also enroll a tablet or landline telephone).
   
   
   
3. Enter the number of the smartphone that you'll have with you when logging in to Ship applications.
   
   
   
   
4. Select the type of phone you are registering.
   
   
   
   
5. Install the Duo Mobile app from the Apple or Android app store. Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily.
   
   
   
6. After installing the app, return to the Duo enrollment window and click I have Duo Mobile installed.
   
   
   
   
7. Open the Duo app on your smartphone, tap the + button, and use your smartphone to scan the barcode on the computer screen.
   (The app will automatically open its built-in scanner when you click on +)
   
   A green checkmark indicates that your account has been properly linked on your phone.
   
   
   
   
   Can't scan the barcode? Click Email me an activation link instead and follow the instructions.
   
   
8. Select the option for the default authentication method that you'd prefer upon log in from the drop down.
   
   
9. Click Finish Enrollment.
   
   
   
   
10. When Duo Mobile is activated, click Continue. You should see this confirmation screen:
    
    

An additional layer of authentication beyond a username and password. 2FA involves something you know (password) plus something you have with you (like Duo Mobile on your smartphone) to prevent someone from logging in with only your password. With Duo 2FA, you still enter your username and password. The second factor provided by Duo is simply an added layer of security on top of your existing credentials. We recommend using Duo Push via the Duo Mobile app to perform 2FA.

This interactive prompt lets you choose how to verify your identity each time you log in (e.g. “Duo Push” or “Call Me”) to a web-based application. The Duo Prompt allows you to enroll and authenticate.

These are numeric codes that can be generated either via the Duo Mobile app, SMS (text message), or a hardware token. Passcodes may be used at any time and are particularly handy for authenticating when your 2FA device doesn't have internet or cellular service.

A push authentication request that is sent to the Duo Mobile App on an enrolled device. Push notifications include information like the geographical location of the access device, IP address of the access device, and the application being accessed so you can verify whether the push is real or fraudulent.

No. Having a smartphone makes for an easier and more secure experience with Duo Push. However, it is also possible to enroll a non-smartphone mobile device or landline to receive SMS (text) passcodes or phone calls. If you are in need of an alternative authentication option, please contact the Technology Help Desk.

Duo Mobile is a mobile application (app) that you install on your smartphone or tablet to generate passcodes for login or receive push notifications for easy, one-tap authentication on your mobile device. It works with Duo Security’s two-factor authentication (2FA) service to make your logins more secure.

If you are a user of a system which requires Duo two-factor authentication, you will receive an enrollment email. Follow the direction in the email to complete your enrollment. If you have not received the email, please contact the Technology Help Desk for assistance.

If you have a smartphone or tablet, we recommend Duo Push, as it is quick, easy-to-use, and secure. See an introduction to Duo Security and a demonstration of Duo Push in this short video.

Duo Push authentication requests require a minimal amount of data -- less than 2KB per authentication. For example, you would only consume 1 megabyte (MB) of data if you were to authenticate 500 times in a given month.

There are several reasons this could be happening. Please try the following to troubleshoot:

1. Make sure your enrolled device has a cellular network or WiFi connection.
2. Have the Duo Mobile app open when you authenticate.
3. Try these additional push troubleshooting steps:
   • iPhone
   • Android
4. If the above solutions don’t work, try using another authentication method, such as passcodes provided in the Duo Mobile app.
5. Contact the Technology Help Desk for further assistance.

See this Duo Knowledge Base article for information on authenticating without cell or internet service.

1. Open the Cisco AnyConnect client and click on Connect.
2. In the Group field, choose Split.
3. Enter your username (not email address) and password.
4. In the Duo auth method field, enter "push", "sms", "phone", or the passcode.

 - "push" using the Duo Mobile app is the fastest

 - "sms" will require you to re-enter your password and the texted passcode

For assistance updating your Duo-registered devices, please contact the Technology Help Desk at 717-477-HELP (x4357).

Please contact the Technology Help Desk at 717-477-HELP (x4357) or helpdesk@ship.edu immediately.

No. Your password is only verified by Shippensburg University systems and never sent to Duo. Duo provides only the second factor, using your enrolled device to verify it’s actually you who is logging in.

No. The Duo Mobile app has no access to change settings or remotely wipe your phone. The visibility Duo Mobile requires is to verify the security of your device, such as OS version, device encryption status, screen lock, etc. We use this to help recommend security improvements to your device. You always are in control of whether or not you take action on these recommendations.