FAQs for Two-Factor Authentication (2FA) with Duo Security
No, we have multiple ways to authenticate with Duo. You can use a smartphone, cell phone, landline (such as your office or home phone), tablet, or hardware token. A complete and up-to-date list of authentication methods is available on the Duo Security website. We recommend that users who have a smartphone choose to use them, since they are the easiest to use with Duo, and the most cost effective for the University to support.
You can download the Duo Mobile App for most tablets.
Duo works with all cell phones and landlines by supporting authentication via phone call. Just click the Call Me button on the authentication prompt (or type "phone" in the "second password" field if you don't see Duo's interactive prompt) and Duo will call your phone. Answer the call and listen to the instructions to authenticate.
If you do not have access to a smartphone, tablet, cell phone, or landline phone that you can use for 2FA, please contact the IT Help Desk at 214-768-3867 for assistance.
During the initial enrollment process, you may register as many devices as you wish, including smartphones, cell phones, landline phones, and tablets. If you need to register another device once you have completed the initial enrollment process, you may do so from the Duo self-service portal.
OIT recommends that you register at least two devices, for example both your smartphone and your office phone. In the event that you lose one device, you will still be able to access 2FA protected systems using your secondary device. If you did not register a second device initially, you register a second device directly from the Duo Login screen. Full instructions can be found at guide.duo.com/add-device.
- Log in to a protected area.
- When you get the Duo screen, ignore the Duo Push that was sent.
- Click the My Settings & Devices link.
- Duo will now need to verify it is you. Click the method you would like to use for verification this one time.
- Approve the verification.
- At the My Settings and Devices screen, uncheck the checkbox next to "Automatically send me a:"
- Click Save.
The Duo Login will automatically try to connect to your smartphone to authenticate, but you have the option at that screen to cancel and ask to authenticate with another method.
We encourage you to set up multiple authentication methods with 2FA, so that when one method is unavailable, you have others from which to choose. See "Can I register multiple devices?"
”Push” authentication with the Duo Mobile app uses a very small amount of Internet data traffic to function (a few kilobytes per login). The text messages and voice calls verification are sent only when you request them, and would be billed by your carrier the same as any other text message or inbound voice call.
SMU will not reimburse users for any expenses incurred. If you would incur significant expense using Duo on a device, we recommend enrolling another device, such as a landline.
If your mobile device registered on Duo does not have a data connection due to location or signal issues, there is also an option to generate a passcode on the device which does not require an internet/data connection. To use this feature, click the Use a Passcode option instead of the push option when logging into your account. Then, on your device, open the Duo app and click/tap on the key icon to the right of SMU. This will present you with a passcode to enter on the login page to access your account.
Contact the IT Help Desk at 214-768-HELP if your YubiKey Key stops working or if you can't log in with the passcodes it generates.
Your YubiKey Key can get "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login. In some cases this can happen by accident if the token is stored next to other objects in a pocket, backpack, etc.
If there is an issue with your carrier, we recommend using the Mobile App to verify over the SMU wireless network. If that is not an option, please contact the IT Help Desk about arranging for a YubiKey Key to connect to Duo.
For the best results we do not recommend using Internet Explorer's Compatibility View with Duo authentication. You may be able to turn off Compatibility View yourself.
From the Address bar:
If the Compatibility View button displays in the Address bar to the right of the page address, you can click the button to exit Compatibility mode.
From the Internet Explorer Tools Menu:
In the Internet Explorer browser window press the Alt key to display the menu bar. Navigate to Tools → Compatibility View settings and make one or
more of the following changes:
- Remove the website where you use Duo authentication from the
"Websites you've added to Compatibility View."
- Uncheck the "Display all websites in Compatibility View" option if present and enabled.
- Uncheck the "Display intranet sites in Compatibility View" option.
Click the Close button to save your change.
Contact IT Help Desk at 214-768-HELP if the Duo Login continues to display incorrectly.
You will not need to authenticate with Duo for 24 hours on that device with that web browser. If you quit your browser or your Single Sign-On session times out, you will still need to sign in with your SMU ID and password.
Also, even if you have selected to "trust this device," if you use another web browser, you will be prompted by Duo to authenticate again in the new web browser.
SMU has a contractual agreement with Duo Security for confidentiality of user information such that it will not be used by Duo Security for any reason other than authentication on behalf of SMU. SMU personnel may also use the information for identification purposes. For example, if a user contacts the IT Help Desk for assistance with their Duo account, we may use the phone number that’s enrolled in Duo to help confirm the user’s identity.
Only specific named administrative SMU contacts have access to Duo enrollment details, and all have signed standard confidentiality agreements with the University. Duo Security undergoes regular infrastructure and operational audits by third-party auditors. To find out more, please visit duo.com/why-duo/security-and-reliability.
After separation from SMU, the user’s Duo enrollment data will be removed. However, authentication logs for that user will be retained. The timeframe for deprovisioning activity has not yet been determined. Our objective is to achieve a balance for removing the data in a timely manner, but not require a user to perform the Duo enrollment process again if they return quickly to SMU employment.
Sometimes the Duo Mobile app will not launch as intended on your smartphone. Usually, a simple reboot of your phone will resolve the issue.
If you don't wish to reboot your smartphone, you could manually launch the Duo app. Your notification should be there waiting for your approval.
Please use the following definitions regarding Duo device enrollment:
|Landline||has a phone number but no app|
|Mobile||has a phone number, can use the Duo Mobile app, and can receive SMS text messages|
|Tablet||has no phone number but can use the app|