Duo NetID 2-Factor Authentication - Device Enrollment and Reactivation

Body

Table of Contents

Overview

The topics listed cover the most common Duo inquiries. You can find directions for enrolling in Duo, adding a new device to Duo, reactivating your push notifications, and troubleshooting your Health and SSO accounts with Duo.

If you require further assistance with Duo for any of your accounts, do not hesitate to contact Help Desk Central at any time. Help Desk Central's phone lines are open 24/7!

First-Time Enrollment

Information

A video for the Duo 2-factor enrollment process is available at https://www.youtube.com/watch?v=0ez_KjeeTng.

The steps below detail how to enroll your NetID account in Duo NetID Two-Factor Authentication, and how to setup an Android or iPhone to receive login requests from your two-factor account. Duo requires Android 8.0 or newer and iOS 13.0 or newer. For assistance in adding tablets, landlines, or cell phones that are not smartphones, contact Help Desk Central at (979) 845-8300 or helpdesk@tamu.edu.

Please note, if you begin DUO enrollment but do not complete it, this can cause errors when trying to access DUO secured applications/sites. Please fully complete the enrollment to prevent any issues with your account.

Instructions

  1. Download Duo Security's mobile application from your smartphone's app store. It is free and appears under the name Duo Mobile. It published by the company Duo Security. Note: This is not the same as Google Duo, which is a video calling app.
  2. Go to duo.tamu.edu and click Enroll in Duo
  3. Log in with your NetID and NetID password
  4. If you have not yet added a device to use with Duo, click Start Setup.
    If you have added devices in the past, click on Add a new device.
  5. Choose Mobile Phone. Click Continue.
  6. Enter your phone number and click the check box to confirm that it is correct.
  7. Verify ownership of your device. Do this by call or text and typing in the 6-digit verification code you receive. Click Continue.
  8. Choose your smartphone’s platform. Click Continue. If you are using a cell phone that is not listed, contact Help Desk Central
  9. Click I have Duo Mobile installed
  10. Use the Duo Mobile application to scan the QR code in your web browser by holding your phone's camera up to the image. If you are unable to scan the QR code, click the Having problems? link, where you will be asked to type in a valid email address that Duo Security can send a confirmation to. 
    NOTE: You must have an Internet connection in order for the QR code to work properly
  11. Click Done to finish setting up the device, or click Enroll another device to add others.

It is strongly recommended that you set up more than one device to use with Duo NetID Two-Factor Authentication. In the case that your primary device is inaccessible, you can use a secondary device as a backup.

If you have any further questions, email helpdesk@tamu.edu or call (979) 845-8300.

Reactivate Duo Mobile on a New Smartphone

Information

These directions will help you reactivate the Duo app if you have a new phone with the same number. These directions will also help you if you simply need to reactivate push notifications for any reason. If your phone number has changed, please call Help Desk Central at (979) 845-8300 or start a chat at help.tamu.edu.

Instructions

When setting up a new phone, we recommend following the instruction below from an incognito or private browser session or from a web browser you do not typically use.  Otherwise, the browser may default to Push authentication (or whatever you have set your default to be) rather than giving you the opportunity to select Call Me as your authentication type. 
 
  1. Go to duo.tamu.edu and log in with your NetID and NetID password.
  2. If the "Check for a Duo Push" screen appears, click Other options
  3. Authenticate by clicking Phone call. 
    • You will need to answer the call and press '3'.
    • If you cannot receive the phone call, you will need to contact Help Desk Central for bypass codes. Please call (979) 845-8300 or visit the Computing Services Complex (CSC), room CS00.
    • If neither of the above options work for you, you can start a chat at help.tamu.edu or email helpdesk@tamu.edu and request a Zoom meeting. Bypass codes cannot be given out over email or chat.
  4. Select Yes, trust browser or No, do not trust browser
  5. Click My Settings & Devices (blue link on the left side of the page).
  6. Authenticate again by clicking Call Me. You should see your phone number listed.
  7. Click Device Options.
  8. Click Reactivate Duo Mobile.
    • If you have never activated push notifications before, it may say "Activate Duo Mobile."
  9. Follow the prompts. Once you scan the QR code and a green check mark appears, you are done!

Changing Your Primary Duo Device

Information

To change your default Duo device, it must be listed as the first option in your list of authentication devices. This will require you to delete any devices listed before your preferred device. You can re-add those devices after you have made your preferred device the default.

Instructions

  1. Log into the duo.tamu.edu using your NetID and your NetID password.
  2. Click on My Settings & Devices on the left.
  3. Select a method (Push, Call, etc.) of authentication to verify your identity.
  4. Click Device Options to the right of the device listed at the top.
  5. Click the red trash can icon to delete this device.
  6. Verify that you want to delete that device.
  7. Repeat this process until the device you want as your default device is listed at the top of your devices list.
  8. You can now add your additional devices back by using the Add a New Device link on the left

Duo Push on Apple Watch

Duo Push notifications can appear on your Apple watch as long as the iPhone receiving Duo authentications is paired via Bluetooth to the Apple watch. Ensure that the Duo Mobile App is installed and activated for the iPhone.

Adding Duo to an Older Phone

Some older cell phones do not support the Duo Mobile App. If this is the case, Duo can still be authenticated via the Call Me option.
To enroll an older device in Duo, follow the same steps given in the First-Time Enrollment section above, but select Other during step 5. You will not be prompted to download Duo and will be allowed to complete the set up process.

Duo 2FA for Texas A&M Health

Information

Below are basic instructions for how to enroll a device and reactivate push notifications for Duo for your Health account. More detailed directions can be found here. 

Enrolling in Texas A&M Health Duo for the First Time

  1. Navigate to vpn.tamhsc.edu
  2. Log in with your HSC Username and your HSC Password
  3. You should be prompted to Start Setup. Follow the prompts. The process is very similar to the process for enrolling your NetID account in Duo.

Adding a New Device to TAMHSC Duo

  1. Navigate to vpn.tamhsc.edu
  2. Log in with your HSC username and HSC password
  3. Click Add New Device under the Texas A&M logo on the left menu 
  4. Authenticate using the Call me option or via Push if an alternate device is available. If you are unable to authenticate, please contact Help Desk Central at (979) 845-8300 or at help.tamu.edu
  5. Proceed to follow the directions on screen to add a new device.

Reactivate Texas A&M Health Duo on a New Smartphone

  1. Navigate to vpn.tamhsc.edu
  2. Log in with your HSC Username and HSC password
  3. Select My Settings & Devices from the left menu under the Texas A&M logo
  4. Authenticate using the Call me option. If you are unable to authenticate, please contact Help Desk Central at (979) 845-8300 or at help.tamu.edu
  5. Click Device Options next to your old device with the same phone number
  6. Click Reactivate Duo Mobile
  7. Follow the on screen instructions to reactivate Duo Mobile

Duo 2FA for Texas A&M System Offices (SSO)

Information

These steps detail how to enroll your SSO account in Duo NetID Two-Factor Authentication as well as how to setup your Android or iPhone to receive login requests from your Duo account. 

If you need any assistance with your SSO account, check out the troubleshooting directions in this article.

Enrolling in Texas A&M System Offices Duo for the First Time

  1. Go to sso.tamus.edu and log in with your SSO credentials. 
  2. If you are not required to use Two Factor Authentication:
    1. Once logged in, click on the Profile tab located towards the top of your window. 
    2. Within the vertical blue rectangle, click on Two Factor Authentication.
    3. If you are presented with the option to use or not use Two Factor Authentication, select Use Two Factor Authentication and click the Save button to save that change. 
  3. If you are required to use Two Factor Authentication, you will be immediately presented with the Start Setup screen for Duo Two Factor Authentication.
  4. Click on the green Start Setup button to commence the setup process.
  5. Select the type of device you wish to add to your SSO Duo account. Please note that this device will need to be with you every time you need to authenticate your SSO log in. 
  6. You will need to enter the phone number associated with the device and click the check box to confirm that the number you entered is the correct number. 
    NOTE: If you are traveling internationally and use the call me option to authenticate, you will need to add the international phone number to your account before leaving the country to ensure that you do no have trouble authenticating.
  7. Select the type of phone your phone number is associated with.
  8. Please go to your devices app store and search for Duo Mobile. This will be the app that from which you will receive push notifications and have the ability to generate codes as a means to authenticate. Note: Duo Mobile is not the same as Google Duo, a video calling app.
  9. Open the app on your device and tab on the + towards the top of your device screen. If you are asked to allow the app to use your camera, please allow it to do so. Scan the barcode on your screen with your phone's camera. Once successfully scanned, your account should be added!
  10. At this point, you may choose to add another device in which you may repeat the steps above. You may also choose your default device and how you would like to authenticate whenever you are logging in to your SSO account.
  11. Once you have saved the settings from the step before, everything should be good to go! Go ahead and try all three methods of authentication to ensure they work as well as to familiarize yourself with the various methods. If you would like to reduce the amount of times you need to authenticate, you may select the Remember me for 60 days check box so that you are not prompted to authenticate for that amount of time. 

Adding a New Device to TAMUS Duo

  1. Navigate to https://sso.tamus.edu
  2. Log in using the "UIN Logon" method (left side of the page) with your UIN and SSO password and authenticate with Duo
  3. Click Profile along the top menu
  4. Click Two-Factor Authentication on the left
  5. Click Add New Device under the TAMUS logo on the left
  6. Proceed to follow the directions on screen to add a new device

Reactivate TAMUS Duo on a New Smartphone

  1. Navigate to https://sso.tamus.edu
  2. Log in using the "UIN Logon" method (left side of the page) with your UIN and SSO password
  3. Click Other options once you see a Duo screen appear with words "Check for a Duo Push" 
  4. Authenticate using the Phone call option. If you are unable to authenticate, please contact your agency's SSO central admin
  5. Click Profile along the top menu
  6. Click Two-Factor Authentication on the left
  7. Click My Settings & Devices under the TAMUS logo on the left and authenticate using the Call me option. If you are unable to authenticate, please contact your agency's SSO central admin
  8. Click Device Options next to your old device with the same phone number
  9. Click Reactivate Duo Mobile
  10. Follow the on screen instructions to reactivate Duo Mobile
  11.  

USB 2FA Tokens

Overview

A USB token is a small chip designed to fit into a computer's USB slot. Its small size allows it to be carried on a key ring or a lanyard for convenience. USB tokens for use with Duo NetID Two-Factor Authentication can be purchased by faculty, staff, students, or university departments. They are not available for purchase by students at this time. Please visit the Texas A&M Software Store for more information on USB keys.

More information about Duo NetID Two-Factor Authentication and how it pertains to Texas A&M, visit Duo Security Two-Factor Authentication. 

Instructions

Insert your USB token into an available USB slot on your computer.
  1. Log into a website that uses the Central Authentication Service using your NetID and NetID password.
  2. After logging in, you will be prompted to provide secondary authentication. If you have two-factor authentication set up, you will see your mobile device listed in the Device field at the top of the page. To use your hardware token, choose the Token option under the drop down menu. 
  3. Click Enter Passcode.
  4. Press your finger to the contact on your USB token. You should see the passcode field populated by a string of characters. This is the passcode being generated by your USB token.
     
    You should then be successfully logged into the website you were trying to access.
     

Recommendations on which USB token will be most appropriate for you can be found at https://u.tamu.edu/KB0016156

If you get prompted for a Duo authentication before completing the setup process, go to https://services.tamu.edu/duo-enroll. You should be able to complete setup at that time.

 

Details

Details

Article ID: 390
Created
Thu 5/2/24 10:57 AM
Modified
Mon 6/24/24 4:37 PM

Related Services / Offerings

Related Services / Offerings (1)

Duo Multi Factor Authentication
The "Duo Multi Factor Authentication" Service offering allows incidents for managing and troubleshooting Duo MFA as well as requests for help setting up Duo MDA.