Duo Multi-Factor Authentication - How to use it

Tags Duo MFA

Image showing logging in on a computer, verifying with duo on a phone and the having access

1. Enter your user name and password  2. Verify your identity with duo  3. You're securely logged in


Using Duo

To verify your identity with Duo - you need one of three things:

  • Recommended: A smartphone or tablet (Android, iPhone, iPad) with the Duo Mobile app installed and activated (see the video below for how the Duo app works)


  • A security key (image below as an example):
    Picture of a Yubikey security key


When a user that is enrolled in the Duo service logs into a Duo protected system, they will see a screen like the following:

Screenshot of Duo Authentication screen

  • The "Send me a Push" button should be used if you use the Duo Mobile app.
  • If you have the security key - then you just need to put it into the USB port of the computer you are logging in from, and press it, to login.
  • If you only have the Duo token (with a small screen and a green button, and not the smart phone app) then click Enter a Passcode.


Duo Mobile App

The Duo Mobile app is New Paltz's recommended option for Duo.  It can be used on your iPhone or Android smart phone or tablet.  The app is free, takes only a small amount of space to install, and uses virtually no data (per month it uses a minuscule fraction of the amount of data of loading a single website) so you don't have to worry about your data plan.  

It can be downloaded by searching for "Duo Mobile" in either the Google Play store (for Android devices) or Apple App store (for iPhones/iPads), or via the links below:

Setting up the Duo Mobile app is quick and easy.  If you opt for the Duo mobile app - you're account will be activated so next time you login to a Duo protected service (such as Office 365, my.newpaltz.edu, Blackboard, and more) you'll be prompted to download, setup, and activate the app.

After your phone is activated, when you log with your username & password in to a Duo protected application, click the Send me a push button on the site you're accessing.  You'll get a push alert on your smart phone which you can click on to bring up the Duo approve/deny screen:

Duo Mobile Screenshot

If you were trying to log in to a Duo protected service, you would click Approve.
If you were NOT trying to log in to a Duo protected service, you can click Deny (and then report the attempt by clicking "It was fraudulent").  This will notify ITS staff at New Paltz.

App Permissions

When first using the Duo mobile app - it will ask for two permissions:

  • Permission to use the camera: this is only needed when setting up the device.  The app will use the camera to capture the QR code on the screen to activate your device.
  • Permission to send notifications: this is needed so you get a notification on your phone of a pending login (so you don't have to manually open the app to approve the login - you can just click on the notification).

Duo Token

The Duo token is pretty simple.  Before you are given or mailed a token, it will be tied to your account by ITS staff.  When you login to a Duo protected service, you'll see the following screen:
Screenshot of Duo token login prompt

Once you see that:

  • Click "Enter a passcode"
  • Press the button on the Duo token - it will show a six digit number.
  • Optionally: Check the "Remember me for 7 days" box so you don't have to do this everytime you are logging in
  • Enter that 6 digit number into the Duo prompt on your computer/phone/tablet where you are trying to login.

Security Key

The security key is a small device with a ring to keep on your key chain.  It is placed into a USB port on your computer when you need to login.

See our Security Key page for more info on setting up and using the Security Key.







0% helpful - 1 review


Article ID: 59857
Wed 8/8/18 12:58 PM
Thu 5/6/21 12:02 PM