Duo Two-Factor Authentication (2FA) Getting Started Guide

Summary

Duo two-factor authentication is an extra layer of account security. It requires you to confirm your identity using your Login credentials and a personal device when trying to access University systems.

Table of Contents

Setup

Sign up for two-factor authentication from your desktop or laptop computer. 

During this process, you will need to have your smartphone available to set up Duo Mobile on your phone. Don't have a smartphone? Call the OIT HelpDesk at 865-974-9900 to get started.

  1. Using a computer, go to 2fa.utk.edu/signup
  2. Log in with your NetID and password.
  3. Select the option 'I have a smartphone' and check the box for 'I am ready to use two-factor...
    Click 'Sign Up'
    Sign Up for Two-Factor
     
  4. Select 'Start Setup'.
  5. Select which type of device you are adding, Mobile phone or Tablet, and select Continue.
  6. Enter your phone number, check the box to confirm the number is correct, then select continue.
    Enter your phone number
     
  7. Select what type of phone you are using, iPhone, Android, or Windows Phone.
    type of phone
     
  8. Install the "Duo Mobile" app on your mobile device.
    Google Play Apple App Store
     
  9. Scan the onscreen code from the Duo app. When the green checkmark appears, select Continue.
    active duo mobile
     
  10. IMPORTANT - You must click  'Continue to Login' to complete the 2FA set-up process.
    My Settings & Devices
     
  11. Select an authentication method.
       -Select 'Send Me a Push' to receive an alert on your smartphone (Recommended)
       -Select 'Enter a Passcode' to use the code displayed in the Duo Mobile App on your smartphone 
  12. You have successfully enabled two-factor on your NetID account and you are ready to use two-factor.
    Select Okay to finish.
    manage two-factor options

Restore or Reactivation

If you get a new phone, you will need to restore your Duo account to the new phone before you will be able to sign in. If your app isn't working as expected, you can also use the restore to reactivate your device.

  1. Once you have your new phone, go to 2fa.utk.edu/restore
  2. Log in with your NetID and password and additional verification information.
  3. Select one of the Duo methods to log in. 
    1. Call Me: Call the cell phone number already registered.  Select 7 to approve.
    2. Enter a Passcode: Select ‘Text me new codes’ to receive an SMS message with new temporary codes to the phone number registered.
    3. Send Me a Push (only if you have access to your old device).

      choose an authentication method
       
  4. IMPORTANT Select ‘Device Options’ for your phone and choose ‘Reactivate Duo Mobile’ and follow the instructions.
    Duo Mobile Restore

    Reactivate Duo Mobile

Known Issues

Known Issue

Solution/Workaround

You are not notified that you have a pending approval

Enable Notification for the Duo App

Setup fails because your camera cannot capture the QR code

Allow the Duo app to access your camera during setup (can be disabled once setup is complete)

Cannot select “Remember me for 7 days” because Duo automatically pushes the notification

Cancel the request, check the box, and push a second notification.

Remember Me for 7 days option not working

Google Chrome: Enable the following option:  Settings > Advanced > Content Settings > Cookies > Allow sites to save and read cookie data (recommended).  In the same area in Chrome, be sure to disable the following option:  Keep local data only until you quit your browser.

Firefox: Preferences > Privacy & Security > Cookies and Site Data > Set Keep until to "They Expire" 

‘Choose an Authentication Method’ box on the Duo login screen is cut off

Set your browser’s Zoom viewing setting to 100%.

Clear cache and cookies.

iOS 12 and above: Safari does not display the Duo Push page after logging into CAS

This is caused by web content set to being filtered. To change this setting go to: Settings > Screen Time > Content & Privacy Restrictions > Content Restrictions > Web Content > And select “Unrestricted Access

Duo login screen blocked or buttons missing 

  • Privacy-minded browser plug-ins such as NoScript or cookie managers, block third-party cookies
  • Block cookies and storage access from third-party trackers.

Add *.duosecurity.com to your whitelist

Firefox 63, disable Content Blocking.

Issues with Qualtrics Surveys

1. Log into Qualtrics
2. Open the survey
3. Click on the Survey Flow tab
4. Remove the / in front of cas in the URI field
5. Click Save Flow

Adobe Creative Cloud App

The Adobe Creative Cloud App does not support security key authentication through Duo. Hardware tokens and the Duo Mobile App push work normally to authenticate.

100% helpful - 1 review

Details

Article ID: 113590
Created
Tue 8/11/20 5:05 PM
Modified
Fri 12/4/20 12:25 PM
Environment
Duo Two-Factor Authentication
NetID