Duo's self-enrollment process makes it easy to register your phone or tablet and activate the Duo Mobile application so you can receive Duo requests via push notification and tap to approve and login.
First-time Enrollment in Duo
Enrollment is the process that registers you as a user in Duo with a device capable of performing two-factor authentication. Duo prompts you to enroll the first time you log into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. Follow the on-screen prompts to set up your Duo authentication device.
Note: For best results, please install the Duo Mobile app before proceeding with first-time enrollment.
When scanning the QR code described in Step 3.4, it must be done using the Duo Mobile app. Using the camera or other QR code reader will not work properly.
Step One: Introduction
Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. Click Next to learn why protecting your identity with two-step verification is important and begin the setup process.
Step Two: Choose Your Verification Method
Click the device type in the list that matches your desired authentication experience:
Duo Mobile is recommended for most users.
- Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.
- Security key: Tap a WebAuthn/FIDO2 security key. Requires Chrome, Safari, Firefox, or Edge.
- Touch ID: Use the fingerprint sensor on Apple MacBooks and Magic Keyboards. Requires Chrome 70 or later.
Step Three: Add Your Chosen Method
Once you choose how to verify your identity, you will next complete the setup steps for that method.
Duo Mobile
Duo Mobile is an app that runs on iOS and Android phones and tablets. It's fast and easy to use, and doesn't require cell services. Duo pushes login requests to Duo Mobile when you have mobile data or wifi connectivity to the internet. When you have no data service, you can generate passcodes with Duo Mobile for logging in to applications.
The current version of Duo Mobile supports iOS 13.0 or greater and Android 8 or greater.
- Select your country from the drop-down list and type your mobile phone number, and then click Add phone number.
If you're going to use Duo Mobile on a tablet (like an iPad) with no phone service, don't enter a phone number and click I have a tablet instead.
2. If you entered a phone number, double-check that you entered it correctly and click Yes, it's correct to continue (or No, change it to go back and enter the number again).
If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.
3. Download and install Duo Mobile on your phone or tablet from the Google Play Store or Apple App Store. Once you have Duo Mobile installed click Next.
4. Open the Duo Mobile app on your phone or tablet and add this account by scanning the QR code shown on your enrollment or login screen.
If you aren't able to scan the QR code, tap Or email activation code and then enter your email address to send the activation link to yourself. Follow the instructions in the email to activate the new account in Duo Mobile.
5. When you receive confirmation that Duo Mobile was added click Continue.
6. If prompted to "Add another way to log in?" Click Skip for now.
You're finished! You can now log in to Duo-protected applications with Duo Push or with a Duo Mobile passcode.
Security Key
A security key is an external device that when tapped or when the button is pressed sends a signed response back to Duo to validate your login. Duo uses the WebAuthn authentication standard to interact with your security keys. You may also see WebAuthn referred to as "FIDO2".
To use a security key with Duo, make sure you have the following:
- A supported security key. WebAuthn/FIDO2 security keys from Yubico is a good option. U2F-only security keys (like the Yubikey NEO-n) can't be used with the Universal Prompt.
- A supported browser: Chrome, Safari, Firefox, or Edge. Refer to the Universal Prompt browser support table for minimum browser versions with security key support in Duo.
- Read the security key information and click Continue.
2. Your browser prompts you to tap your security key to use it with Duo (Firefox example shown).
3. When you receive confirmation that you added your security key as a verification method click Continue.
You can now log in to Duo-protected applications that show the Duo prompt in a web browser using your security key.
Touch ID
In order to use Touch ID with Duo, make sure you have the following:
- A MacBook Pro, MacBook Air, or Apple Magic Keyboard with a Touch ID button.
- A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
- Chrome 70 or later. Safari and other browsers on macOS are not supported.
- Read the Touch ID information and click Continue.
2. Chrome prompts you to verify your identity on duosecurity.com.
3. Place your finger on the Touch ID button in the Touch Bar to complete Touch ID enrollment.
4. When you receive confirmation that you added Touch ID as a verification method click Continue.
You can now log in to Duo-protected applications that show the Duo prompt in a web browser using your fingerprint sensor.
If you are logging into another device besides a MacBook, you'll need to add a secondary verification method. We recommend adding Duo Mobile now.
If you have more than one MacBook with which you'd like to approve Duo login requests using Touch ID, you'll need to add each of them separately as a new Touch ID device in Duo.
Optional: Add a Backup Method
If you have access to one of the other Duo options (Not provided by Davenport), then it's possible to add a second verification method that you can use as a backup if the first method you added isn't available to you at some point. For example, if you lose or forget your phone and need to log in with Duo, or if you want to access an application from a different MacBook than the one you used to set up Touch ID in Duo.
When you click Continue after registering your first verification method, Duo prompts you to add another one.
Choose any of the available methods and proceed through the steps for adding it. If you don't want to add another method at this time, click Skip for now.
After you add a second login verification method, or if you chose to skip it, you'll arrive at the end of the Duo setup process. Click Log in with Duo to log in to the application using the Duo method you just added.
Add or Manage Devices After Enrollment
You can add additional verification methods, manage your existing devices, or reactivate Duo Mobile for Duo Push using one of the following two methods.
If you get a new cellphone, using one of these methods would allow you to activate Duo Mobile on the new phone before wiping your old one.
Duo Central
Use this URL to login to Duo Central - https://davenport.login.duosecurity.com/devices
You will be asked to log into Single Sign-On and need to verify your identity. If you're visiting Duo Central to delete or update a device you don't have anymore (such as a phone you lost or replaced), be sure to pick a verification option that you still have with you. If you don't have any devices you can use to authenticate to device management, contact the Support Center.
After approving a Duo authentication request, you can see all your registered devices in the device management portal.
Add Another Device
To add a new method of verifying your identity in Duo, click Add a device and select one of the verification options.
Duo takes you through the steps of adding the new device, just like first-time enrollment. The difference between adding a new device from device management and during first-time enrollment is that when you have finished enrolling the new device you return to the device management page to view all your registered devices, including the new one, instead of continuing to log into an application.
Duo Universal Prompt
When logging in to Single Sign-On, click the Other options link on the authentication page to view your list of available methods. If your organization enabled self-service device management then you'll see a Manage devices choice at the end of the list. Click that to enter the device management portal.
To access the device management you'll first need to verify your identity, just as you do when logging in to a service or application protected by Duo. Click on an available option to verify your identity. If you're visiting device management to delete or update a device you don't have anymore (such as a phone you lost or replaced), be sure to pick a verification option that you still have with you. If you don't have any devices you can use to authenticate to device management, contact the Support Center.
After approving a Duo authentication request, you can see all your registered devices in the device management portal.
Add Another Device
To add a new method of verifying your identity in Duo, click Add a device and select one of the verification options.
Duo takes you through the steps of adding the new device, just like first-time enrollment. The difference between adding a new device from device management and during first-time enrollment is that when you have finished enrolling the new device you return to the device management page to view all your registered devices, including the new one, instead of continuing to log into an application.