Getting started with Two-Step Login (Duo) at IU

Important:
As of February 2, 2017, CAS logins for all IU faculty, staff, student employees, retirees, and affiliates require Two-Step Login (Duo). Others at IU (those with academic no-pay or simply a student role), can opt into the Two-Step security feature. For more, see About using Two-Step Login (Duo) every time I log into CAS.
Before you begin:

Enroll a first device

To begin enrolling a first device with Two-Step Login (Duo):

  1. Log into Two-Step Login (Duo); if prompted, log into CAS with your IU credentials.
  2. Click Enroll a device.
  3. Provide the following information (Step 1), and then click Continue:
    • Employees (including student employees): Enter the last four digits of your National ID Number (e.g., Social Security Number). If you do not have a National ID, select your month and day of birth from the drop-down menus.
    • Students and affiliates: Select your month and day of birth from the drop-down menus.
  4. Select your device from the drop-down menu (Step 2).
  5. Use the Duo Control Panel (the panel with the IU logo) to add your device by following the step-by-step instructions (Step 3), which you will also find below based on your device:

Smartphone (iOS, Android, Windows)

Note:
If your smartphone does not have a US or Canadian phone number, instead choose the instructions for enrolling a smartphone without using a phone number.

You can two-step with Duo's mobile application, Duo Mobile. Although you can also two-step without the Duo Mobile app by receiving a phone call or text message (SMS) passcodes, UITS strongly recommends using the Duo Mobile application.

To see how this works, view a video about enrolling a smartphone or tablet with Duo.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your device's phone number, verify that it's correct, and then click Continue.
  4. Select your device's operating system, and click Continue.
  5. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  6. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  7. Follow the instructions to activate Duo Mobile on your smartphone.
  8. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Tablet (iOS or Android)

You can two-step with Duo's mobile application, Duo Mobile.

  1. In the Duo Control Panel, click Start setup.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.
  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your tablet.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your tablet.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Cell (simple) phone

You can two-step with Duo by receiving a phone call and text message (SMS) passcodes. Standard phone call and text messaging rates apply.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your cell phone number. Verify that it's correct, and click Continue.
  4. Select Other (and cell phones), and click Continue.
  5. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

U2F token

You can two-step with Duo by tapping or inserting your U2F token.

To see how this works, view a video about using a U2F token with Duo.

  1. Be sure you're using the supported browser, Chrome 41 or later. Insert the token into your device's USB port.
  2. In the Duo Control Panel, click Start setup.
  3. Select U2F token, and then click Continue.
  4. Click Continue, and a pop-up window will display to continue enrollment.
  5. The system will automatically contact your device for approval. Depending on your U2F token model, you'll need to tap, insert, or press the button on your device to complete the enrollment.
  6. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.
Notes:
  • If a U2F token is your only enrolled device, you will be able to complete Two-Step logins, but some of the features of the Two-Step Login site will be unavailable. For this reason, UITS strongly recommends enrolling another device.
  • Enrolled U2F tokens will display under "My Settings & Devices" in the Duo Control Panel, but will not be listed under "You can Two-Step Login with:" on the "Your devices & settings" page.

Landline

Note:
Due to security concerns, the University Information Security Office (UISO) recommends that you do not use your office phone if you use UniCom (i.e., Skype for Business/Lync phones). For more, see Can I use an office phone with Two-Step Login (Duo)?

You can two-step with Duo by receiving a phone call. Standard phone call rates apply.

  1. In the Duo Control Panel, click Start setup.
  2. Select Landline, and click Continue.
  3. Enter your landline phone number. Verify that it's correct, and click Continue.
  4. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Google Voice phone number

Note:
You should only enroll a Google Voice phone number when all other options are not possible for you.

You can two-step with Duo by receiving a phone call or a text message to your Google Voice phone number. Phone calls and text messages sent to your Google Voice phone number will also be delivered to your Gmail account. Due to security concerns, the University Information Security Office (UISO) recommends that you do not forward your Gmail email to your IU email account.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your Google Voice phone number. Verify that it's correct, and click Continue.
  4. Select Other (and cell phones), and click Continue.
  5. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Single-button hardware token (SBHT)

Note:
You cannot register a single-button hardware token (SBHT) yourself.

To see how this works, view a video about using a single-button hardware token.

  1. If the serial number on your token is a 13-digit number, the Support Center has probably already enrolled it with your Two-Step Login (Duo) account. To confirm, go to Two-Step Login (Duo) and click the green Your devices & settings button. If the button instead reads "Enroll a device" (rather than "Your devices & settings"), contact your campus Support Center to request activation.
  2. If the serial number is formatted as DSECxxxxxxxx or 27-xxxxxxx-x, go to Duo Token Activation in One.IU to request activation. You'll need to enter the serial number from the back of the token. You'll be notified when the request is approved; then, to confirm, go to Two-Step Login (Duo) and click Your devices & settings. If the button reads "Enroll a device" rather than "Your devices & settings", contact your campus Support Center.

Smartphone without using a phone number

You can two-step with Duo's mobile application, Duo Mobile.

  1. In the Duo Control Panel, click Start setup.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.
  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your smartphone.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

This is document bfgm in the Knowledge Base.
Last modified on 2017-05-16 12:13:02.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.