Duo 2FA: Manage Two-Factor for Departmental NetIDs

Overview

This article discusses how to add and manage two-factor for your departmental NetID. Only the account owner may make changes to the account.

Instructions

Add or Manage 2FA

1. Go to the add or manage the phones/tokens page. 
2. Sign in with your NetID & Password. 
3. Select the Departmental NetID you would like to manage. 
4. If 2FA is not set up, you will see a prompt to sign up for 2FA: 
   
5. If 2FA is set up, you will see the phones, tokens, or bypass codes associated with the account.
6. Click the corresponding Add button to add a Phone, Token, or Bypass Code. (Screenshot under step 9).
7. Phone:
   1. Enter the NetID for the person you want to add and choose Confirm.
   2. Select the device to add and click Add.
   3. Once added, you can choose to Add/Delete a device, Manage Another account, or Logout.
   • Note: Device names will only show up beside the phone number if the device's owner gave the device a name in Duo. Adding a name is a helpful way to keep track of the person's name that corresponds with the listed phone number. To name your device, see Duo 2FA: Change the Device Name.
8. Token: 
   1. An existing token must be assigned to a NetID for this option to work.
   2. Enter your NetID to add your own token. To add someone else's token, enter the NetID of the person to be added to the account. Once added, this person will be able to sign into the departmental account using two-factor authentication.
9. Bypass Code: 
   1. Set the desired Bypass Code Type, Bypass Code Expiration (30 days max), Bypass Code Reuse, and click Create.

Screenshot Guide

Logging into the Account

1. When logging into a system protected by 2FA, such as Microsoft 365, log in with the departmental NetID and password. 
2. When prompted for Duo, select the appropriate device to receive the push from the dropdown list. If there are multiple phones or devices, you will see the device name or phone number.  After selecting your device, click Send me a Push.
   • It may be helpful for each person to name their device in Duo. 
     1. Go to Add or manage the devices used for two-factor authentication.
     2. Authenticate with Duo. 
     3. Next to your device, choose Device Options > Change Device Name.
     4. Name the device and click Save.