Duo - Enrolling in SSO Two-Factor Authentication

Overview

The steps below detail how to enroll your SSO account in Two-Factor Authentication, powered by Duo Security as well as how to setup your Android, iPhone, Blackberry, or Windows Phone to receive login requests from your Duo Security account. 

Effective February 17, 2025, Duo Mobile will no longer support iOS 15. Apple deploys new operating systems as major releases every year. As part of these release cycles, older operating systems on iOS mobile devices stop receiving important updates and go through end-of-service and end-of-life phases. To anticipate these OS deprecations, Duo will no longer support Duo Mobile on iOS 15.

• The vendor will no longer be able to troubleshoot issues with Duo Mobile running on iOS 15 or older. Because the vendor will no longer be able to troubleshoot issues, Texas A&M support personnel will likewise be unable to troubleshoot issues.
• Duo Push will continue to work on already-installed versions of Duo Mobile on iOS 15, and users will continue to be able to authenticate.
• Duo Mobile–generated passcodes will also continue to work on already-installed versions of the app, and users will continue to be able to authenticate.
• SMS-delivered passcodes and phone callback authentication are not affected by this change. These methods do not rely on Duo Mobile.
• Duo Mobile will continue to be fully supported on iOS 16 or newer.
• Mobile devices using iOS 15 will no longer receive Duo Mobile maintenance fixes or security updates.
• Users cannot download the latest version of Duo Mobile on mobile devices running on iOS 15.

Additional information regarding what what versions of iOS are supported by Duo can be found in Duo's knowledge base.

Enrolling in SSO Two-Factor Authentication Powered by Duo Security via Mobile Device

1. Go to sso.tamus.edu and log in with your SSO credentials. 
2. If you are not required to use Two Factor Authentication:
   1. Once logged in, click on the Profile tab located towards the top of your window. 
   2. Within the vertical blue rectangle, click on Two Factor Authentication.
   3. If you are presented with the option to use or not use Two Factor Authentication, select Use Two Factor Authentication and click the Save button to save that change. 
3. If you are required to use Two Factor Authentication, you will be immediately presented with the Start Setup screen for Duo Two Factor Authentication.
4. Click on the green Start Setup button to commence the setup process.
   
   
5. Select the type of device you are wanting to add to your SSO Duo account. Please not that this device will need to be with you every time you need to authenticate your SSO log in. 
   
   
    
6. You will need to enter the phone number associated with the device and click the check box to confirm that the number you entered is the correct number.
   NOTE: If you are traveling internationally and use the call me option to authenticate, you will need to add the international phone number to your account before leaving the country to ensure that you do no have trouble authenticating.
   
   
    
7. Select the type of phone your phone number is associated with.
   
   
8. Please go to your devices app store and search for "Duo Mobile". This will be the app that from which you will receive push notifications and have the ability to generate codes as a means to authenticate.
   
   
9. Open the app on your device and tab on the + towards the top of your device screen. If you are asked to allow the app to use your camera, please allow it to do so. Scan the barcode on your screen with your phones camera. Once successfully scanned, your account should be added!
   
   
10. At this point, you may choose to add another device in which you may repeat the steps above. You may also chose your default device and how you would like to authenticate whenever you are logging in to your SSO account.
    
    
11. Once you have saved the settings from the step before, everything should be good to go! Go ahead and try all three methods of authentication to ensure they work as well as to familiarize yourself with the various methods. If you would like to reduce the amount of times you need to authenticate, you may select the Remember me for 60 days check box so that you are not prompted to authenticate for that amount of time.