Duo 2-Factor - Specifying Authentication Method Without an Interface

Overview

2-Factor authentication is required for access to many Texas A&M online services. However, Duo 2-Factor authentication does not provide a graphical user interface for every service. For these services (such as Infoblox, VPN, and Bomgar, for example), you will not be presented with options to choose "Push" or "Verified Push." For applications such as these, you will need to specify your authentication method as part of the password portion of the login process.

Authentication Methods

Push

The recommended method of logging into applications such as these with Duo 2-Factor is via Push or Verified Push. Push is the default method of secondary authentication, while Verified push notifications on Duo add an extra layer of security by prompting users to confirm login attempts as legitimate, helping to prevent unauthorized access to university accounts.  After entering your NetID and password and clicking Login, the application will automatically send a Push request to your default device with no further prompting. You can acknowledge this Push request as normal.

YubiKey

To use a YubiKey USB token for 2-Factor authentication with an application, you must enter your YubiKey one-time passcode as part of your password. To do this:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
4. Make sure there is not a space before or after the comma
5. Press the contact pad on your YubiKey. You should see your password expand in the password field as the one-time passcode is entered
6. You do not need to press Login. After your one-time passcode has been entered, the authentication process will automatically attempt to log you into the system.

Authentication Code

To use an authentication code for 2-Factor authentication with an application, you must enter the one-time authentication code generated by the Duo mobile app as part of your password. To do this:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
4. Make sure there is not a space before or after the comma
5. Enter the authentication code generated by the Duo mobile app. This code is generated by pressing the key icon next to the Texas A&M University entry.
6. Press Login. You should then be logged into your application.

If you would like to make 2-Factor authentication by phone your default secondary authentication method, you can do so by removing and re-adding your phone to your 2-Factor account in Duo. This is also necessary if you switch to a new phone