Multi-factor authentication user guide

Duke users can register a phone or tablet with Duo Security to use as a second step when logging into a Duke website or system. Visit the multi-factor authentication home page to view what devices you currently have registered. Duke's IT Security Office recommends that you register more than one device.

Frequently asked questions:


What is multi-factor authentication?
What are pass codes?
Forgot your device?
Have a new device?
What are my authentication options?
What is a YubiKey® and how can I get one?
What does 'Remember device for 72 hours' mean?
Traveling abroad?
Duke Med: Login to VPN & AWI/Citrix?


NetID login page

You will be prompted to log in with your NetID, password and new second factor.
NetID login page
The pass code text box will accept any type of code, including a temporary code or one received via SMS, generated via the Duo Mobile app or generated by a YubiKey®.

For advanced users


SSH
When authenticating to a system using SSH, if you are required to use Duo, then you will see a Duo prompt after entering your password. The Duo prompt will allow you to choose how you want to perform the verification. You can also enter any of the pass code options as well.

When using SCP to transfer a file, since it is not possible to receive a Duo prompt, your options for verification are limited to Duo Push and a Phone Call. If you have multiple devices registered, the notification would get sent to the first device that you have registered. If that device is a smart phone or tablet, then Duo Push would be used. Otherwise, you would receive a phone call.

Windows RDP
When authenticating to a Windows system, you will see an option to specify a Duo pass code. Once again, this can accept any type of pass code including a YubiKey®. However, you can also enter the following words:
  • "push" to receive a Duo Push notification (or "push2" or "push3" to use the second or third device in your list). This assumes you have a smart phone or tablet with the Duo Mobile app installed.
  • "phone" to perform verification via a phone call (or "phone2" or "phone3" to use the second or third phone in your list).
  • "sms" to receive a batch of SMS pass codes and once you receive them, you can use one to authenticate.
VPN
When using VPN, you will see a field where you can specify a second password. This field can accept any type of pass code including a YubiKey®. However, you can also enter the following words:
  • "push" to receive a Duo Push notification (or "push2" or "push3" to use the second or third device in your list). This assumes you have a smart phone or tablet with the Duo Mobile app installed.
  • "phone" to perform verification via a phone call (or "phone2" or "phone3" to use the second or third phone in your list).
  • "sms" to receive a batch of SMS pass codes and once you receive them, you can use one to authenticate.

Support

If you need further assistance, contact your local IT support group/person.

You can also contact your appropriate Service Desk:
University Users: OIT Service Desk - 919 684 2200
Duke Medicine Users: DHTS Service Desk - 919 684 2243