Authenticating with the Duo Prompt

The Duo Prompt lets you choose how to verify your identity each time you log in.

Using the Duo Prompt

Supported Browsers: Chrome, Firefox, Safari, Opera, and Internet Explorer 8 or later.

After completing Duo enrollment, you'll see the Duo Prompt the next time you perform a browser-based login to a web service or application protected with Duo.

Duo Prompt

If you have more than one device enrolled, like a mobile phone and a hardware token, you'll see a device selector.

Select Device in Duo Prompt

Select the device you want to use and then choose your authentication method.

Method Description
Duo Push Pushes a login request to your phone or tablet (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device). Just review the request and tap Approve to log in.
Call Me Authenticate via phone callback.
Enter a Passcode

Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.

Click Send codes to get a new batch of passcodes texted to your phone.

You can also use security keys for one-touch hardware-backed authentication.

Your Duo administrator may have limited which authentication methods you can use to log in. If this is the case, then the Duo prompt shows only the allowed methods. So, if your organization disallows phone call for Duo logins, the prompt may only show the "Send Me a Push" and "Enter a Passcode" options.

In the event that your organization restricts use of the authentication methods attached to your account, you'll see a message indicating this, with the option to enter a Duo bypass code.

Duo Prompt with Bypass Code Option Only

If you can't authenticate or aren't sure what to do, click Need help? on the left side of the Duo prompt. Your administrator may have customized the help text with additional instructions or contact information.

Custom Help Text

Self-Service Options

If your organization has enabled self-service you can add an additional authentication device by clicking the Add a new device link, or update your setting and remove authentication methods by clicking My Settings & Devices.

Add a New Device

Trusted Devices

You'll also see a Remember me for... option if your administrator enabled Duo's trusted devices feature. If you check this box when authenticating you won't need to perform Duo second-factor authentication again for the duration specified on the prompt.

My Settings & Devices

Authenticating from Smaller Screens

If you're logging in with Duo from a device with a smaller screen (like a tablet) or small browser window then your Duo Prompt may look slightly different. Don't worry! All the devices and options shown in the full-size prompt are available for use, and you can enroll and manage devices by following the same steps.

 

Small Duo Prompt

Access Add a New Device or My Settings & Devices by clicking the Settings button at the top. Click the X on the Settings button to return to the Duo Prompt.

Small Duo Prompt Settings

Software Updates

You may be prompted to update outdated browser or plugin software when authenticating to SFA resources. You can take a few minutes to update your web browser, Flash, or Java version to the most recent before authenticating, or choose to update later and continue on to the protected resource.

Duo Prompt with Outdated Software Notification

If SFA blocks access to Duo-protected resources from devices with outdated browsers or plugins, then you may not complete two-factor authentication until you update your software.

Blocked Software Notification

 

Learn more about software updates.

 

SFA may also choose to block access from certain computer and mobile operating systems. In this case, you must upgrade your OS to an allowed version or switch to a different device.

Blocked OS Notification

Personal Devices

SFA may choose to block access to applications from devices not managed by the university. If this policy is enforced then you won't be able to complete Duo authentication from your personal device.

 

Blocked Personal Device Notification

Click See what is allowed for more information about this policy setting.

Blocked Personal Device - More Info

Details

Article ID: 78851
Created
Wed 5/22/19 10:14 AM
Modified
Tue 12/3/19 4:36 PM

Related Articles (6)

Overview of Duo Mobile on Apple Watch
Overview of Duo enrollment
Overview of Duo Mobile on iOS
Overview of Duo Recovery for iOS devices.
Introduction to two-factor authentication and Duo