Managing your Two-Step Login (Duo) devices and settings

Important:
As of November 2, 2017, CAS logins for all IU students, faculty, staff, retirees, affiliates, and those with Academic (ACNP) status require Two-Step Login (Duo). On November 30, 2017, this will also include group or departmental accounts. IU Guest accounts do not require Two-Step Login. For more, see About using Two-Step Login (Duo) every time I log into CAS.

Manage devices and settings

To manage your devices and settings:

  1. Go to Two-Step Login (Duo). If prompted, log into CAS with your IU credentials and complete a two-step login with Duo. You will receive email notification if your login is completed successfully.

    If you've lost or misplaced your device, contact your campus Support Center.

  2. Click Your devices & settings, and then authenticate again via CAS and Duo.
  3. In the "Management" section, select Add a device, Remove a device, or Change device settings.
  4. Complete another login with Duo by initiating one through the Duo Control Panel (the panel with the IU logo).
  5. To display the relevant instructions, select the type of task you wish to complete from the tabs in the "(Optional) Get instructions" section, and then choose your task from the drop-down menu:
Note:

To lessen the number of times you need to complete a Two-Step Login with Duo, select Remember me for 12 hours when completing a Two-Step login. This will keep you from having to Two-Step for CAS logins for 12 hours in the browser from which you initiated your login.

Duo screen with option to remember me for 12 hours

Under "Add a device"

Smartphone (iOS, Android, Windows)

Note:
If your smartphone does not have a U.S. or Canadian phone number, instead choose the instructions for enrolling a smartphone without using a phone number.

You can two-step with Duo's mobile application, Duo Mobile. Although you can also two-step without the Duo Mobile app by receiving a phone call or text message (SMS) passcodes, UITS strongly recommends using the Duo Mobile application.

To see how this works, view a video about using a smartphone or tablet with Duo.

  1. In the Duo Control Panel, click Add another device.
  2. Select Mobile phone, and click Continue.
  3. Enter your device's phone number and verify that it's correct. Click Continue.
  4. Select your device's operating system, and click Continue.
  5. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  6. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  7. Follow the instructions to activate Duo Mobile on your smartphone.
  8. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Tablet (iOS or Android)

You can two-step with Duo's mobile application, Duo Mobile.

To see how this works, view a video about using a smartphone or tablet with Duo.

  1. In the Duo Control Panel, click Add another device.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.
  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your tablet.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your tablet.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Cell (simple) phone

You can two-step with Duo by receiving a phone call and text message (SMS) passcodes. Standard phone call and text messaging rates apply.

To see how this works, view a video about using a simple cell phone or landline with Duo.

  1. In the Duo Control Panel, click Add another device.
  2. Select Mobile phone, and click Continue.
  3. Enter your cell phone number. Verify that it's correct, and click Continue.
  4. Select Other (and cell phones), and click Continue.
  5. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

U2F token

You can two-step with Duo by tapping or inserting your U2F token.

To see how this works, view a video about using a U2F token with Duo.

  1. Be sure you're using the supported browser, Chrome 41 or later. Then insert the token into your device's USB port.
  2. In the Duo Control Panel, click Add another device.
  3. Select U2F token, and then click Continue.
  4. Click Continue, and a pop-up window will display to continue enrollment.
  5. The system will automatically contact your device for approval. Depending on your U2F token model, you'll need to tap, insert, or press the button on your device to complete the enrollment.
  6. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.
    Note:
    Enrolled U2F tokens will display under "My Settings & Devices" in the Duo Control Panel, but will not display under "You can Two-Step Login with:" on the "Your devices & settings" page.

Landline

Note:
Due to security concerns, the University Information Security Office (UISO) recommends that you do not use your office phone if you use UniCom (i.e., Skype for Business/Lync phones). For more, see Can I use an office phone with Two-Step Login (Duo)?

You can two-step with Duo by receiving a phone call. Standard phone call rates apply.

To see how this works, view a video about using a simple cell phone or landline with Duo.

  1. In the Duo Control Panel, click Add another device.
  2. Select Landline, and click Continue.
  3. Enter your landline phone number. Verify that it's correct, and click Continue.
  4. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Google Voice phone number

Note:
You should only enroll a Google Voice phone number when all other options are not possible for you.

You can two-step with Duo by receiving a phone call or a text message to your Google Voice phone number. Phone calls and text messages sent to your Google Voice phone number will also be delivered to your Gmail email account. Due to security concerns, the University Information Security Office (UISO) recommends that you do not forward your Gmail email to your IU email account.

  1. In the Duo Control Panel, click Add another device.
  2. For a cell phone, select Mobile phone, and click Continue.
  3. Enter your Google Voice phone number. Verify that it's correct, and click Continue.
  4. Select Other (and cell phones), and click Continue.
  5. The Duo Control Panel will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Single-button hardware token (SBHT)

Note:
You cannot register a single-button hardware token (SBHT) yourself, and you are allowed only one active token for your account at a time.

To see how this works, view a video about using a single-button hardware token.

  1. If the serial number on your token is a 13-digit number, the Support Center has probably already enrolled it with your Two-Step Login (Duo) account. To confirm, go to Two-Step Login (Duo) in One.IU and click Your devices & settings to see if the token is displayed below the "You can Two-Step Login with" section. If the token is not displayed, contact your campus Support Center to request activation.
  2. If the serial number is formatted as DSECxxxxxxxx or 27-xxxxxxx-x, go to Duo Token Activation in One.IU to request activation. You'll need to enter the serial number from the back of the token. You'll be notified when the request is approved; then, to confirm, go to Two-Step Login (Duo) and click Your devices & settings to see if the token is displayed below the "You can Two-Step Login with" section. If the token is not displayed, contact your campus Support Center.

Smartphone without using a phone number

You can two-step with Duo's mobile application, Duo Mobile.

  1. In the Duo Control Panel, click Add another device.
  2. Select Tablet, and click Continue.
  3. Select your device's operating system, and click Continue.
    Note:
    If your phone's operating system is not listed, choose Android. (Your device may be named "Android" by default, but if you wish, you can rename it later; see Rename a device.)
  4. Follow the instructions in the Duo Control Panel to install the Duo Mobile app on your smartphone.
  5. Once Duo Mobile is installed, click I have Duo Mobile installed in the Duo Control Panel.
  6. Follow the instructions to activate Duo Mobile on your smartphone.
  7. Once Duo Mobile is activated, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page, where your newly added device should be listed.

Under "Manage devices & settings"

Remove a device

Note:
You cannot remove your only device or token. If you wish to replace your only device or token, first enroll or activate its replacement, and then delete the original.
  1. In the Duo Control Panel, next to the device you wish to remove, click Device options.
  2. Click the trash icon, and click Save.

Rename a device

  1. In the Duo Control Panel, next to the device you wish to rename, click Device options.
  2. Select Change Device Name, and enter a new name for your device.
  3. Click Save.

Set a default device

  1. In the Duo Control Panel, click the drop-down menu next to "Default Device:", and select the device you wish to set as your default for Duo.
  2. Click Save.
Note:
You cannot choose a one-button hardware token or a U2F token as your default device.

Set up automatic Duo Push/Call notifications

If you enable automatic Duo Push/Call for Two-step Login (Duo), the system will automatically send an authentication request, either via push notification to your Duo Mobile app or via a phone call to your device (depending on which you've selected). To enable this feature:

  1. In the Duo Control Panel, click the drop-down menu next to "Default Device:", and select the device you wish to use with automatic Duo Push/Call.
  2. Click the drop-down menu next to "When I log in:", and select either Automatically send this device a Duo Push or Automatically call this device.
  3. Click Save.

Add a new number for an existing phone

  1. In the Duo Control Panel, click Add another device.
  2. Select Mobile phone, and click Continue.
  3. Enter the new phone number, verify that it's correct, and then click Continue.
  4. Select your device's operating system, and click Continue.
  5. Since you should already have Duo Mobile installed, click I have Duo Mobile installed.
  6. Open the Duo Mobile app on your phone, tap Edit, and then tap the minus icon next to the "Indiana University" entry. Select Delete, and then, when prompted, confirm the deletion. Tap Done.
  7. Once the account has been removed, at the top, tap the plus icon, scan the QR code displayed on the computer monitor.
  8. Once the account is added in Duo Mobile, click Continue in the Duo Control Panel and it will refresh with the "My Settings & Devices" page.
  9. From the "My Devices" section, to the right of your old phone number, select Device Options, and then click the trash icon.
  10. When prompted, click Remove, and then click Done.

Reactivate Duo Mobile

To reactivate Duo Mobile on a device if the app or your profile was removed:

  1. In the Duo Control Panel, next to the appropriate device, click Device Options.
  2. Select Reactivate Duo Mobile, and then follow the on-screen instructions.

    If the device is associated with a phone number, select the appropriate platform, and then click Continue.

    If Duo Mobile is not installed on your device, follow the instructions in the Duo Control Panel to install the Duo Mobile app.

  3. Click I have Duo Mobile installed, and you will be presented with a QR code.
  4. Follow the instructions in the Duo Control Panel to reactivate Duo Mobile on your device.
  5. To finish reactivating Duo Mobile, click Continue.

Remove an account from Duo Mobile

  1. Open Duo Mobile on your device, and then tap Edit.
  2. Tap - (minus sign) next to the "Indiana University" account, and select Delete.
  3. When prompted, confirm the account deletion, and then tap Done.

This is document bfkp in the Knowledge Base.
Last modified on 2017-11-17 14:28:33.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.