Get started with Two-Step Login (Duo) at IU

Enroll a first device

Before you begin:
UITS strongly recommends registering a smartphone or tablet with Two-Step Login (Duo). For details, see Two-Step Login (Duo) device recommendations.

To begin enrolling a first device with Two-Step Login (Duo):

  1. Go to Two-Step Login (Duo). If prompted, log in with your IU username and passphrase.
    Note:
    If you have a special exception to use Duo telephony features, see the SMS or phone instructions in About Duo telephony features.
  2. If you see the "Protect Your Indiana University Account" screen, you'll need to enroll a device. Use the Duo Control Panel (the panel with the IU logo) to add your device by following the step-by-step instructions, which you will also find below based on your device:

Smartphone (iOS, Android, Windows)

Important:
If your smartphone does not have a US or Canadian phone number, you must enroll your smartphone as a tablet using the Smartphone without using a phone number instructions below.
Note:
If you have a special exception to use Duo telephony features, see the SMS or phone instructions in About Duo telephony features.

You can two-step with Duo's mobile application, Duo Mobile.

  1. In the Duo Control Panel, click Start setup.
  2. Select Mobile phone, and click Continue.
  3. Enter your device's phone number, verify that it's correct, and then click Continue.
  4. Select your device's operating system, and click Continue.
  5. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  6. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  7. Follow the instructions to activate Duo Mobile on your smartphone.
  8. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Tablet (iOS or Android)

You can two-step with Duo's mobile application, Duo Mobile.

  1. In the Duo Control Panel, click Start setup.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.
  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your tablet.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your tablet.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

MacBook with Touch ID

You can two-step with Duo by touching the Touch ID sensor on your MacBook while in the Chrome browser.

  1. Make sure you're using Chrome (version 41 or later).
  2. In the Duo Control Panel, click Start setup.
  3. Select Touch ID, and click Continue.
  4. Click Continue; a pop-up window will display to continue enrollment.
  5. Tap the Touch ID sensor to enroll your MacBook. If prompted to give Duo access to Touch ID information, click Allow.
  6. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

USB security key

You can two-step with Duo by tapping or inserting your USB security key.

To see how this works, view a video about using a USB security key with Duo.

  1. Be sure you're using a supported browser (Firefox version 60 or later, or Opera version 54 or later). Insert the token into your device's USB port.
  2. In the Duo Control Panel, click Start setup.
  3. Select Security Key, and then click Continue.
  4. Click Continue, and a pop-up window will display to continue enrollment.
  5. The system will automatically contact your device for approval. Depending on the model, you'll need to tap, insert, or press the button on your USB security key to complete the enrollment.
  6. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Single-button hardware token

Note:
You cannot register a single-button hardware token yourself, and you are allowed only one active token at a time. Your token can be added to any of your group or departmental accounts as well; see Use Two-Step Login (Duo) with a group account.

If you have a single-button hardware token, the Support Center or your IT Pro has probably already enrolled it with your Two-Step Login (Duo) account. To confirm, go to Two-Step Login (Duo) and click the green Your devices & settings button. If the button instead reads "Enroll a device" (rather than "Your devices & settings"), you will need to visit a Support Center walk-in location with a photo ID to have the token added to your account.

To see how this works once set up, view a video about using a single-button hardware token.

Smartphone without using a phone number

You can two-step with Duo's mobile application, Duo Mobile.

Note:
At IU, these are the instructions you need to follow if your smartphone does not have a US or Canadian phone number.
  1. In the Duo Control Panel, click Start setup.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.

    If your phone's operating system is not listed, choose Android. (Your device may be named "Android" by default, but if you wish, you can rename it later; see Rename a device.)

  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your smartphone.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Related documents

Manage your Two-Step Login (Duo) devices and settings Help for Two-Step Login (Duo)

This is document bfgm in the Knowledge Base.
Last modified on 2022-12-20 09:52:42.