Duo - Enrolling in SSO Two-Factor Authentication

Overview

The steps below detail how to enroll your SSO account in Two-Factor Authentication, powered by Duo Security as well as how to setup your Android, iPhone, Blackberry, or Windows Phone to receive login requests from your Duo Security account. 

For Windows Phone users, please see the following: Based on continuously decreasing use of Windows Phone devices and Microsoft’s own deprecation of support for the platform, Duo is removing the option to activate or reactivate Duo Mobile on Windows Phone 8.0 and lower devices starting September 3, 2018. This end of activation will not affect mobile app authentications for users who have already downloaded and activated the app, nor will it have any effect on Windows Phone 8.1 or Windows Phone 10.x users.

Beginning January 1, 2019, Duo will also end support for the Duo Mobile app on all Windows Phone 10.x and 8.x devices. Neither the 8.0 and lower “end of activation” milestone or 10.x and 8.x “end of support” milestone will affect authentication from the Windows Phone application; push and app-generated passcode authentications will continue to function on installed apps.

Please note that SMS-delivered passcodes and phone callback authentication do not rely on the Duo Mobile app, and Duo will continue to support these types of authentication for Windows Phone devices with or without the app.

Enrolling in SSO Two-Factor Authentication Powered by Duo Security via Mobile Device

1. Go to sso.tamus.edu and log in with your SSO credentials. 
2. If you are not required to use Two Factor Authentication:
   1. Once logged in, click on the Profile tab located towards the top of your window. 
   2. Within the vertical blue rectangle, click on Two Factor Authentication.
   3. If you are presented with the option to use or not use Two Factor Authentication, select Use Two Factor Authentication and click the Save button to save that change. 
3. If you are required to use Two Factor Authentication, you will be immediately presented with the Start Setup screen for Duo Two Factor Authentication.
4. Click on the green Start Setup button to commence the setup process.
   
   
    
5. Select the type of device you are wanting to add to your SSO Duo account. Please not that this device will need to be with you every time you need to authenticate your SSO log in. 
   
   
    
6. You will need to enter the phone number associated with the device and click the check box to confirm that the number you entered is the correct number.
   NOTE: If you are traveling internationally and use the call me option to authenticate, you will need to add the international phone number to your account before leaving the country to ensure that you do no have trouble authenticating.
   
   
    
7. Select the type of phone your phone number is associated with.
   
   
    
8. Please go to your devices app store and search for "Duo Mobile". This will be the app that from which you will receive push notifications and have the ability to generate codes as a means to authenticate.
   
   
    
9. Open the app on your device and tab on the + towards the top of your device screen. If you are asked to allow the app to use your camera, please allow it to do so. Scan the barcode on your screen with your phones camera. Once successfully scanned, your account should be added!
   
   
    
10. At this point, you may choose to add another device in which you may repeat the steps above. You may also chose your default device and how you would like to authenticate whenever you are logging in to your SSO account.
    
    
     
11. Once you have saved the settings from the step before, everything should be good to go! Go ahead and try all three methods of authentication to ensure they work as well as to familiarize yourself with the various methods. If you would like to reduce the amount of times you need to authenticate, you may select the Remember me for 60 days check box so that you are not prompted to authenticate for that amount of time.