Duo Enrollment Guide
This article provides instructions for enrolling in Duo Multi-Factor Authentication (MFA) using the Duo Universal Prompt. During enrollment, users will set up the Duo Mobile app on their smartphone or tablet to verify login attempts.
Quick Overview
- Initial enrollment requires Duo Mobile
- Enrollment uses the Duo Universal Prompt
- Login verification uses Verified Push (number matching)
- Additional authentication methods can be added after enrollment
Note: During initial enrollment, Duo Mobile is the only authentication method available. After enrollment is complete, you may add additional authentication methods (such as Touch ID or security keys), if supported and permitted by SFA policy.
What You Need Before You Start
Before beginning Duo enrollment, make sure you have:
- A smartphone or tablet (iOS or Android)
- Internet access (Wi-Fi or cellular)
- Ability to install the Duo Mobile app
- Your mySFA username and password
Note: If you do not have access to a smartphone or tablet, please contact the IT Help Desk before starting enrollment.
When You Will Be Prompted to Enroll
You will be prompted to enroll in Duo the first time you sign in to an SFA system that requires multi-factor authentication, such as mySFA, D2L, email, or other protected services.
Enrollment Steps
Step 1: Start Duo Setup
- Navigate to https://mysfa.sfasu.edu, and log in with your mySFA username and password.
- You will receive the enrollment welcome message.
- Select Get Started to begin enrollment.
Step 2: Choose Your Authentication Method
Note: At this stage, Duo Mobile is required to complete enrollment. Other authentication methods can be added after enrollment through the Duo Prompt.
- Select Duo Mobile.
- Enter your phone number if you are using a cell phone, or select I have a tablet if you are using a tablet, then click Continue.
- Verify you entered the correct number and select Yes, it’s correct.
Step 3: Install Duo Mobile
If Duo Mobile is not already installed on your device:
- Navigate to the App Store (iOS) or Google Play Store (Android) and search for Duo Mobile.
- Install the Duo Mobile app.
- Return to your browser and select Next.
Note: You may be asked for your device password when installing the app.
Step 4: Activate Duo Mobile
You will now activate Duo Mobile by linking it to your account.
- Open the Duo Mobile app on your phone.
- Click Continue.
- Click Use a QR code.
- Scan the QR code displayed on your screen.
- Click Next.
- You will be shown the SFA account that is being added. Click Save.
- Complete the enrollment by clicking Continue in your browser.
Note: You will be asked to give the application permission to use your camera.
Important: The QR code shown in this image is for demonstration purposes only. Do not attempt to scan this image. You must scan the QR code displayed on your own screen during enrollment.
Step 5: Complete Login with Verified Push
- Click Log in with Duo.
- Your login screen will display a three-digit number.
- Open the Duo Mobile app.
- Select the matching number shown on your computer screen and click Verify.
Security Reminder: Only approve Duo requests you personally initiate. If you receive an unexpected Duo prompt, do not approve it and contact the IT Help Desk.
After you have completed enrollment, you may manage or enhance your Duo authentication setup.
Add or Manage Devices After Enrollment
You can add a new authentication device or manage your existing devices via the Duo Prompt.
Otherwise, contact the Help Desk at (936) 468-4357 if you ever need to change your phone number, re-activate Duo Mobile, or add an additional phone.
Other Supported Authentication Methods (After Enrollment)
After completing enrollment, users may optionally add additional authentication methods through the Duo Prompt. These methods are not available during initial enrollment, but can be added later if supported and permitted by SFA policy.
Duo supports a wide variety of devices that you can use in addition to Duo Push on your smartphone. Learn more about other types of devices you can enroll, like Security Keys and macOS Touch ID, or different ways of using your phone to authenticate. Some authentication methods may be restricted by SFA policy, or incompatible with some browsers or applications.
Need Help?
Contact
the IT Help Desk at
(936) 468-4357 if you experience issues enrolling in Duo or verifying a login.