Using 2-Factor Authentication (2FA) on Your Devices

After you’ve enrolled in 2-Factor Authentication (2FA), then what happens? The following information explains the options you have for verifying your identity when you log in to protected systems. Options vary based on the devices (cell phone, desk phone, token, etc.) you have enrolled in 2FA.

Smartphone

A smartphone provides the greatest number of authentication options:

  • Duo Push: After the Duo Mobile app is installed and active, you can choose the Duo push option to authenticate by tapping on an “approve” button on your phone. Duo Push requires an Internet connection.
  • Passcode: After the Duo Mobile app is installed and active, tap the green key button to receive a 6-digit passcode. On the 2FA login page, type the 6 digits into the “Passcode” field and hit “Log In.” This option is similar to using a hardware token and will work even without an Internet connection and/or cellular service.
  • Phone call: You can choose to have Duo Security call your smartphone so you can follow the simple phone prompts to authenticate. NOTE: This option is not preferred, as each phone call authentication incurs a small fee UD must pay our 2FA vendor. 
  • Text passcodes: You can choose the “text passcodes” option at the 2FA screen so that a text message will be sent to your phone with 5 one-time use passcodes. Each time you need to authenticate, you enter one of the 6-digit codes into the passcode field on the 2FA screen. When you have used the 5 passcodes, you can request to receive 5 more.

Cell phone

A cell phone that does not allow you to download and install apps has two authentication options:

  • Phone call: You can choose to have Duo Security call your mobile phone so you can follow the simple phone prompts to authenticate. NOTE: This option is not preferred, as each phone call authentication incurs a small fee UD must pay our 2FA vendor. 
  • Text passcodes: You can choose the “text passcodes” option at the 2FA screen so that a text message will be sent to your phone with 5 one-time use passcodes. Each time you need to authenticate, you enter one of the 6-digit codes into the passcode field on the 2FA screen. When you have used the 5 passcodes, you can request to receive 5 more.

Tablet

A tablet with the Duo Mobile app installed and active provides some of the same authentication options as a smartphone:

  • Duo Push: After the Duo Mobile app is installed and active, you can choose the Duo push option to authenticate by tapping on an “approve” button on your phone. Duo Push requires an Internet connection.
  • Passcode: After the Duo Mobile app is installed and active, tap the green key button to receive a 6-digit passcode. On the 2FA login page, type the 6 digits into the “Passcode” field and hit “Log In.” This option is similar to using a hardware token and will work even without an Internet connection and/or cellular service.

Landline phone

A landline will work for 2FA; however, as each phone call authentication for 2FA incurs a small fee UD must pay our 2FA vendor, it's strongly recommended that you enroll an additional authentication device in the service and use your landline as a back-up authentication method. 

A landline has one authentication option:

  • Phone call: You can choose to have Duo Security call your landline phone so you can follow the simple phone prompts to authenticate. 

Token

Only a Duo Token will work with 2FA. Other tokens (such as Vasco tokens) will not work with 2FA.

A Duo Token has one authentication option:

  • Passcode: You can generate a passcode by tapping the button on the token and then entering the auto-generated number in the passcode box on the 2FA login screen.

If you receive an error message that says “Incorrect passcode. Please try again.” after entering the passcode displayed on your token, then:

Your token may be out of sync. Common ways this can happen:

  • The token has not been not used for over a month.
  • The button has been pressed repeatedly and the codes were not used (as might happen if you keep it in your pocket or on a keyring).
  • The token is upside down (make sure the green button is on the left and the word "DUO" is at the top).

To fix this issue:

  • Attempt to log in three times in a row, entering a new code each time. This will resync your DUO token to the servers.
  • If this method of resyncing does not work, contact the IT Service Center at (937)229-3888 and they will resync your token.
Was this helpful?
0 reviews

Details

Article ID: 46796
Created
Wed 1/24/18 10:26 AM
Modified
Tue 11/9/21 3:18 PM