Enrollment registers you as a user in Duo with a device for two-factor authentication. Duo prompts you to enroll when logging into protected services or web applications with interactive prompts. Follow the on-screen prompts to set up your device.
Step One: Introduction
Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. Click Get started to enroll your first device.
Step Two: Choose Your Verification Method
Choose the device type in the list that matches your desired authentication experience:
- Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.
- Security key: Connect or plug in your USB YubiKey and press it to generate and submit a passcode to log in to the application.
- Phone number: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo.
- Touch ID: Use the fingerprint sensor on Apple MacBooks, and Magic Keyboards.
- Hardware token: A keychain device that generates passcodes.
Only UIT can add hardware tokens and YubiKey OTP tokens for you. These verification options do not show up in the list of available options.
Duo recommends the most secure option of the methods available to you, so it's a good idea to set up that method first if you have a device that supports it.
Step Three: Add Your Chosen Method
Once you choose how to verify your identity, you will next complete the setup steps for that method.
Step Four: Add a Backup Method
Add a second verification method as a backup in case you lose or forget your phone.
After registering your first method, Duo prompts you to add another. Choose any available method and proceed through the steps. If you don’t want to add another method, click “I don’t want to add more devices.”
After adding a second login verification method, or skipping it, you’ll reach the Duo setup process end. Click “Log in with Duo” to log in using the new method.