Duo 2-Factor - Specifying Authentication Method Without an Interface

Overview

2-Factor authentication is required for access to many Texas A&M online services. However, Duo 2-Factor authentication does not provide a graphical user interface for every service. For these services (such as Infoblox, VPN, and Bomgar, for example), you will not be presented with options to choose "Push," "Call me," or "Send me a passcode." For applications such as these, you will need to specify your authentication method as part of the password portion of the login process.

Authentication Methods

Push

The recommended method of logging into applications such as these with Duo 2-Factor is via Push. Push is the default method of secondary authentication. After entering your NetID and password and clicking Login, the application will automatically send a Push request to your default device with no further prompting. You can acknowledge this Push request as normal.

YubiKey

To use a YubiKey USB token for 2-Factor authentication with an application, you must enter your YubiKey one-time passcode as part of your password. To do this:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
4. Make sure there is not a space before or after the comma
5. Press the contact pad on your YubiKey. You should see your password expand in the password field as the one-time passcode is entered
6. You do not need to press Login. After your one-time passcode has been entered, the authentication process will automatically attempt to log you into the system.

Authentication Code

To use an authentication code for 2-Factor authentication with an application, you must enter the one-time authentication code generated by the Duo mobile app as part of your password. To do this:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
4. Make sure there is not a space before or after the comma
5. Enter the authentication code generated by the Duo mobile app. This code is generated by pressing the key icon next to the Texas A&M University entry.
6. Press Login. You should then be logged into your application.

Phone

To use 2-Factor authentication via a phone call to your default phone number:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
4. Make sure there is not a space before or after the comma
5. Type phone after the comma. This can be entered in upper, lower, or a mix of upper and lower case letters.
6. You do not need to press Login. After you have confirmed your login attempt by phone, the authentication process will automatically attempt to log you into the system.

If you would like to make 2-Factor authentication by phone your default secondary authentication method, you can do so by removing and re-adding your phone to your 2-Factor account in Duo. This is also necessary if you switch to a new phone