# Duo 2-Factor Authentication # Set Up Duo 2-Factor Authentication **\*\*Did you get a new phone and not setup [Duo Restore](#bkmrk--19) beforehand? Visit our [Recovering Duo 2-Factor Account page](https://kb.mlml.sjsu.edu/books/security-anti-malware/page/recovering-duo-2-factor-account) to learn how to setup Duo 2-Factor Authentication on a new device.\*\*** #### **What is Two-Factor Authentication?** Two-Factor Authentication (2FA) adds a second layer of security to your SJSUOne account. By verifying your identity using a second factor (such as your mobile device or a key fob), 2FA prevents anyone else from logging into your account, even if they know your password. Duo 2FA only effects your SJSUOne account. Once it is set up, you must use Duo 2FA to sign-in to this account and its associated services (SJSU Email, PeopleSoft, CFS, FTS, etc). It does not apply to your MLML-specific credentials. Currently, it is available to all SJSU/Foundation Staff, Faculty, and Student Employees. **To setup Duo 2-Factor Authentication:** - **Start with [First Steps](#bkmrk-first-steps%3A)** - **Proceed to [Installation](#bkmrk-install-instructions)** - **Continue to either [SmartPhone](#bkmrk-if-you-are-using-a-s) (recommended) or [Key Fob](#bkmrk-if-you-are-using-a-k)** - **Finish by [Enabling Third-Party Accounts](#bkmrk--19) for easy recovery** #### **First Steps:**
- Go to the [SJSU Duo Page](http://www.sjsu.edu/it/services/computer-security/duo.php) - Scroll down to **Register for Duo 2FA - SJSU Employees Only** - Select the **Smartphone App** option in the **Duo Method** section of the form. - *Please Note: *Only select the **Key Fob** option if you *do not own a smartphone* or* absolutely refuse* to install the Duo App on your phone. A key fob is a small physical device that displays a continuously updating passcode. Please submit an [IT Helpdesk Ticket](https://helpdesk.mlml.calstate.edu/) to request a key fob. - Enter your information and then **Submit** the form. Select “**College of Science**” in the **Division or College** section:
[![SJSU-Duo-Registration.png](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/SJSU-Duo-Registration.png)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/SJSU-Duo-Registration.png)
- Wait to receive an email from SJSU IT enabling Duo on your account - Once you receive the email with setup instructions, it may take 1-2 hours for the change to sync to your account
#### **Install Instructions**:
- Navigate to the [**SJSUOne** ](https://one.sjsu.edu/)page, or any other page where you use your SJSU login credentials (eg. SJSU Email):
[![SJSUOne-Sign-In.png](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/SJSUOne-Sign-In.png)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/SJSUOne-Sign-In.png)
- **Sign** **In**: - Note: If you are already logged in, you may want to use your browser’s incognito/private mode so that you do not have to log out and back in again.
**![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690151856.png)**
- Click **Setup**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690159219.png)
- Scroll down and click **Start** **Setup**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690171069.png)
##### If you are using a Key Fob:
- Press **Enter a Passcode**, and press the single **Button** on your **Duo Key Fob**:
[![Duo-Fob-Select-Passcode.png](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Fob-Select-Passcode.png)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Fob-Select-Passcode.png)
[![Duo-Fob.jpg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Fob.jpg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Fob.jpg)
- Enter your **One Time Password** from the Key Fob into the passcode field and press **Log In**: - You have about 15 seconds to enter the passcode.
[![Duo-Fob-OTP.jpg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Fob-OTP.jpg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Fob-OTP.jpg)
[![Duo-Fob-Login.png](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Fob-Login.png)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Fob-Login.png)
Congratulations, Duo 2-Factor Authentication should now be set up for use with your Key Fob!
##### If you are using a Smartphone:
- Select **Mobile phone** and click **Continue**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690182776.png)
- Enter your **phone number** and click **Continue**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690234183.png)
- Select the **type of phone** and click **Continue**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690245004.png)
- Search and install “**Duo mobile**” from your app store onto your device: - Apple **App Store** for iOS - Google **Play** **Store** for Android - Once downloaded, go back to setup screen and click **I have Duo** **Mobile** :
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690258059.png)
- Open the Duo Mobile app and tap **Get Started** or **Add** **Account**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690271637.png)
- **Allow camera permissions** on your device if you have not already, and **scan the QR** **code** that appears on the setup screen:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690292286.png)
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690318192.png)
- Once you have scanned the QR code, scroll down and click **Continue** on the setup screen:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690334908.png)
- Check/set device settings for Duo and click **Continue to** **Login**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690381958.png)
- Congratulations, Duo 2-Factor Authentication should now be set up for use with your smartphone!
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690392729.png)
#### **Signing In:**
- To sign in with Duo 2FA from your computer or other device, click **Send Me a** **Push**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690404769.png)
- Press **Approve** on your phone:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690411648.png)
- Alternatively, click **Enter** **Passcode:** - Entering a passcode may be helpful in situations where the push notification won’t get through, for instance when your computer has a connection to the internet but you have no data service (cell or WiFi) on your phone.
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690441049.png)
- Enter the **passcode** from Duo on your phone into the field on the device you are signing in with:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690492350.png)
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690540347.png)
#### **Enable Easy Account Recovery:** **Recovering your account on a new device can be made simple by setting up Duo Restore NOW - before you get a new device. It backups your account and uses a recovery password that you can enter on your new device to register that new account. If you do not do this, you will have to unregister your old device, then register your new device with SJSU IT (even if it is the same number).** **To learn how to setup Duo Restore for your iOS or Android follow the instructions on [this page](https://guide.duo.com/duo-restore).** #### **For more information:** - - [SJSU Duo Page](http://www.sjsu.edu/it/services/computer-security/duo.php) - [Duo End-User Guide](https://guide.duo.com/) # Sign In with Duo 2-Factor Authentication This page assumes you have **previously set up** Duo 2-Factor Authentication with your **smartphone** or a **key fob**. If you have not, please see our [Duo Set Up Guide](https://kb.mlml.sjsu.edu/books/security-anti-malware/page/set-up-duo-2-factor-authentication). ##### **First, sign in to SJSU Normally:**
- Navigate to the [**SJSUOne** ](https://one.sjsu.edu/)page, or any other page where you use your SJSU login credentials (eg. SJSU Email):
[![SJSUOne-Sign-In.png](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/SJSUOne-Sign-In.png)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/SJSUOne-Sign-In.png)
- **Sign** **In** with your SJSU ID Number or SJSU Email Address and Password: - - Note: If you are already logged in, you may want to use your browser’s incognito/private mode so that you do not have to log out and back in again.
**![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690151856.png)**
Your browser will now bring up the Duo 2-Factor Authentication page, the method you use to sign in with Duo 2-FA will vary based on which option you select and whether you are using a smartphone or a key fob. These methods are outlined below. #### #### **Sign In with a Push Notification:**
- To sign in with 2-factor Authentication from your computer or other device you are signing in with, click **Send Me a Push**:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690404769.png)
- Press **Approve** on your phone:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690411648.png)
#### #### **Sign In with a Passcode:**
- Alternatively, click **Enter** **Passcode:** - Entering a passcode may be helpful in situations where the push notification won’t get through, for instance when your computer has a connection to the internet but you have no data service (cell or WiFi) on your phone.
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690441049.png)
- Enter the **passcode** from Duo on your phone into the field on the device you are signing in with:
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690492350.png)
![](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-02-Feb/scaled-840-0/image-1550690540347.png)
#### **Sign in with a Key Fob Passcode:**
- On the Duo **Sign in** page, where it says **Device**, make sure the device selected is **Token**:
[![Duo-Devices.jpg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Devices.jpg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Devices.jpg)
- Press **Enter a Passcode**, and press the single **Button** on your **Duo Key Fob**:
[![Duo-Devices-Passcode-highlight.jpeg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Devices-Passcode-highlight.jpeg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Devices-Passcode-highlight.jpeg)
[![Duo-Fob.jpg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Fob.jpg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Fob.jpg)
- Enter your **One Time Password** from the Key Fob into the passcode field and press **Log In**: - You have about 15 seconds to enter the passcode.
[![Duo-Fob-OTP.jpg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Fob-OTP.jpg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Fob-OTP.jpg)
[![Duo-Token-Passcode-Login-highlighted.jpeg](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/scaled-840-0/Duo-Token-Passcode-Login-highlighted.jpeg)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2019-04-Apr/Duo-Token-Passcode-Login-highlighted.jpeg)
# Recovering Duo 2-Factor Account **When you setup your Duo 2-Factor Account, it's important to setup [Duo Restore](https://help.duo.com/s/article/duo-restore?language=en_US) to ensure easy account recovery if you get a new device or your account is deleted off your original device. However, if you did not enable Duo Restore before getting a new device do not fear, you can still recover your account by contacting the SJSU IT Help Desk. Follow the instructions below:** 1. File an [IT Ticket](https://isupport.sjsu.edu/mlml) and include your name, and your SJSU email address and ID number. 2. When your request is processed, you will be sent a temporary bypass code. 1. Visit the SJSU Duo MFA Settings page: [https://sjsu.okta.com/signin/verify/duo/web](https://sjsu.okta.com/signin/verify/duo/web) 2. Enter this code when prompted for a Duo code: [![image-1634258396430.png](https://kb.mlml.sjsu.edu/uploads/images/gallery/2021-10/scaled-1680-/image-1634258396430.png)](https://kb.mlml.sjsu.edu/uploads/images/gallery/2021-10/image-1634258396430.png) 3. Follow the directions on the SJSU Duo setup page to add your new device as a Duo authentication device: [https://www.sjsu.edu/it/services/computer-security/duo/](https://www.sjsu.edu/it/services/computer-security/duo/) # How to Access Duo Multi-Factor Authentication #### **What is Duo?** Two-Factor Authentication (MFA) adds a second layer of security to your SJSUOne account. By verifying your identity using a second factor (such as your mobile device or a key fob), MFA prevents anyone else from logging into your account, even if they know your password #### **Who should use Duo?** Students should set up Duo MFA to protect their account and private information from being hacked. As of September 2020, it is available to all SJSU staff and students #### **How does Duo work?** Two-Factor Authentication combines something you know (your username and password) with something you carry (your Apple or Android smartphone, or a Hardware Token / Key-Fob), to ensure that only you can log in to your SJSUOne account. After entering your username and password you will be prompted to confirm your login, using your device ##### Cost - Using the smartphone app factor is covered by the CSU master license - Hardware tokens (key fobs) are purchased by SJSU and provided to you. Replacements are available for broken or lost fobs #### **How do I set up Duo for my account?** ##### Using a smartphone 1. Download the Duo mobile app - [Apple Devices](https://apps.apple.com/us/developer/duo-security/id413163561) - [Android Devices](https://play.google.com/store/apps/details?id=com.duosecurity.duomobile&hl=en_US) 2. [Register for SJSU Duo](http://duoregistration.sjsu.edu/Login?ReturnUrl=%2fEligibility%2f) - After you register, Duo should be enabled for your account within one hour - At your next login, a series of prompts will guide you through the self service Duo Mobile enrollment process. The initial enrollment should be completed by logging in from a web browser on a computer, and having your phone with you 3. Secure login - Once your enrollment is complete, every time your SJSU ID and Password is requested, you will also get a notification pushed to your mobile device. Acknowledge this notification to complete the login process ##### Using a key FOB The current procedures for student access to Duo are only for smart phones, so please contact the [IT Service Desk](http://www.sjsu.edu/it/support/service-desk/index.php) for assistance by calling 408-924-1530 or by submitting a [help desk ticket](https://www.sjsu.edu/it/support/service-desk/help-ticket.php). Because Duo MFA is a security service, the IT Service Desk must confirm your identity before providing assistance. #### **More Resources:** [SJSU's Duo for Students page](https://www.sjsu.edu/it/services/computer-security/duo/2FA-students/index.php?mkt_tok=eyJpIjoiTlRVeU5qQmlaV0kzT1dJdyIsInQiOiJSSjdtb0xyR24zUkZwSVp6dmErZkFtRk82UE1ZZjhiam91OUxRK1haemNUQ2lSQ2pqa3NicXNqN2hUMENmQWRqU0VCNHZwd21WN09rSEpQMDY0MmtDbEV6c0ZvdVNjd3VBMnhQUnVwZitZSlRRalVtbVNKZ1NEY1wvOUloSmkwdXYifQ%3D%3D) [Duo's Guide to MFA's ](https://guide.duo.com) [Duo's YouTube channel ](https://www.youtube.com/user/duosec)