Get started with Two-Step Login (Duo) at IU

Before you begin:
UITS strongly recommends registering a smartphone or tablet with Two-Step Login (Duo). For details, see Two-Step Login (Duo) device recommendations.

Enroll a first device

To begin enrolling a first device with Two-Step Login (Duo):

  1. Go to Two-Step-Login (Duo). If prompted, log in with your IU username and passphrase.
  2. If you see the "Protect Your Indiana University Account" screen, you'll need to enroll a device. Use the Duo Control Panel (the panel with the IU logo) to add your device by following the step-by-step instructions, which you will also find below based on your device:

Smartphone (iOS, Android, Windows)

Important:
If your smartphone does not have a US or Canadian phone number, you must enroll your smartphone as a tablet using the Smartphone without using a phone number instructions below. Call- and text-based options for IU's Two-Step Login (Duo) do not work on smartphones that do not have US or Canadian phone numbers; for more, see About international phone numbers and Two-Step Login (Duo) at IU.

You can two-step with Duo's mobile application, Duo Mobile. Although you can also two-step without the Duo Mobile app by receiving a phone call or text message (SMS) passcodes, UITS strongly recommends using the Duo Mobile application.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your device's phone number, verify that it's correct, and then click Continue.
  4. Select your device's operating system, and click Continue.
  5. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  6. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  7. Follow the instructions to activate Duo Mobile on your smartphone.
  8. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Tablet (iOS or Android)

You can two-step with Duo's mobile application, Duo Mobile.

  1. In the Duo Control Panel, click Start setup.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.
  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your tablet.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your tablet.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

MacBook with Touch ID

You can two-step with Duo by touching the Touch ID sensor on your MacBook while in the Chrome browser.

  1. Make sure you're using Chrome (version 41 or later).
  2. In the Duo Control Panel, click Start setup.
  3. Select Touch ID, and click Continue.
  4. Click Continue; a pop-up window will display to continue enrollment.
  5. Tap the Touch ID sensor to enroll your MacBook. If prompted to give Duo access to Touch ID information, click Allow.
  6. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Cell (simple) phone

You can two-step with Duo by receiving a phone call and text message (SMS) passcodes. Standard phone call and text messaging rates apply.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your cell phone number. Verify that it's correct, and click Continue.
  4. Select Other (and cell phones), and click Continue.
  5. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

USB security key

You can two-step with Duo by tapping or inserting your USB security key.

To see how this works, view a video about using a USB security key with Duo.

  1. Be sure you're using a supported browser (Chrome version 41 or later, Firefox version 60 or later, or Opera version 54 or later). Insert the token into your device's USB port.
  2. In the Duo Control Panel, click Start setup.
  3. Select Security Key, and then click Continue.
  4. Click Continue, and a pop-up window will display to continue enrollment.
  5. The system will automatically contact your device for approval. Depending on the model, you'll need to tap, insert, or press the button on your USB security key to complete the enrollment.
  6. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Landline

Note:
Due to security concerns, the University Information Security Office (UISO) recommends that you do not use your office phone unless you have a traditional (analog) desk phone. For more, see Office phones and Two-Step Login (Duo).

You can two-step with Duo by receiving a phone call. Standard phone call rates apply.

  1. In the Duo Control Panel, click Start setup.
  2. Select Landline, and click Continue.
  3. Enter your landline phone number. Verify that it's correct, and click Continue.
  4. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Google Voice phone number

Note:
You should only enroll a Google Voice phone number when all other options are not possible for you.

You can two-step with Duo by receiving a phone call or a text message to your Google Voice phone number. Phone calls and text messages sent to your Google Voice phone number will also be delivered to your personal (not Gmail at IU) account. Due to security concerns, the University Information Security Office (UISO) recommends that you do not forward your Gmail email to your IU email account.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your Google Voice phone number. Verify that it's correct, and click Continue.
  4. Select Other (and cell phones), and click Continue.
  5. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Single-button hardware token

Note:
You cannot register a single-button hardware token yourself, and you are allowed only one active token at a time. Your token can be added to any of your group or departmental accounts as well; see Use Two-Step Login (Duo) with a group account.

If you have a single-button hardware token, the Support Center or your IT Pro has probably already enrolled it with your Two-Step Login (Duo) account. To confirm, go to Two-Step-Login (Duo) and click the green Your devices & settings button. If the button instead reads "Enroll a device" (rather than "Your devices & settings"), you will need to visit a Support Center walk-in location with a photo ID to have the token added to your account.

To see how this works once set up, view a video about using a single-button hardware token.

Smartphone without using a phone number

You can two-step with Duo's mobile application, Duo Mobile.

Note:
At IU, these are the instructions you need to follow if your smartphone does not have a US or Canadian phone number.
  1. In the Duo Control Panel, click Start setup.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.

    If your phone's operating system is not listed, choose Android. (Your device may be named "Android" by default, but if you wish, you can rename it later; see Rename a device.)

  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your smartphone.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

This is document bfgm in the Knowledge Base.
Last modified on 2020-01-28 13:17:32.