You are using an unsupported browser. Please update your browser to the latest version on or before July 31, 2020.
close

For password issues please highlight link below--right click--select go to address. Once page opens Go to Step 4 and follow instructions.

https://cdn.cccs.edu/landing-pages/ethos-identity/faq.html

announcement close button
Home > Tutorials > DUO Multifactor Authentication Documentation
DUO Multifactor Authentication Documentation
print icon

 

FAQ and Recommendations

 

What is Duo Multifactor Authentication and why do I need it?

`

What Authentication options are there?

 

There are 4 options for using Duo MFA:

 

  1. Smart Phone Mobile App (Recommended).
  2. SMS Text
  3. Phone Call
  4. Hardware Token

 

What does CCCS IT recommend?

 

We highly recommend the Duo smart phone mobile app, which is available for download via the Apple App Store and the Google Play store respectively. This application provides the best user experience and is easy to use.

 

Where can I find more information about Duo?

 

More information about Duo can be found here: https://guide.duo.com/

Getting Started

 

Before you can enroll your device you will need to receive the Duo enrollment email from your IT department.

 

What will the Duo enrollment email look like?

 

Your email will arrive from Colorado Community College System and will contain an invitation to complete the enrollment process.  A sample of the email is shown below:

 

 

 

 

Where do I get the Duo Mobile app?

 

Depending on the type of phone you have the app can be downloaded from either the Apple App store for Apple iOS or the Google Play store for Android phones.

 

Search for Duo and make sure you download the “Duo Security App” and NOT the Google Duo app. To be sure Duo Security app is GREEN as seen below:

 

 

Enrolling a Mobile Device

  1. Look for an email from duo with enrolling a device

 

 

  1. Click on the URL in the email it should be similar to this

 

  1. Follow the steps to enroll your device

 

  1. Click Start setup

 

 

  1. Select the type of device you are enrolling  

 

 

  1. Enter the phone number of the device you want to enroll

 

  1. Click the checkbox to confirm your device’s number

 

 

  1. Select the type of phone you are enrolling

 

  1. Follow the instructions on the screen to download the Duo app from the respective app store i.e. Apple App Store or Google Play

 

 

  1. Once installed click “I have Duo Mobile Installed” and open the App on the device you are enrolling.

 

  1. Activating the app links it to your account so you can use it for authentication. On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the Duo app's built-in barcode scanner. Follow the platform specific instructions for your device:

 

 

  1. The "Continue" button is clickable after you scan the barcode successfully.

 

 

  1. You can choose how to authenticate by selecting from the “When I log in” drop down menu.

 

 

If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" or "Automatically call this device" and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

 

  1. Once enrolled there will be an enrollment successful notification

 

Congratulations! Your device is ready to approve Duo push authentication requests.

Enrolling a Landline Device

 

  1. Look for an email from duo with enrolling a device

 

 

  1. Click on the URL in the email it should similar to this

 

  1. Follow the steps to enroll your device

 

  1. Click Start setup

 

 

 

  1. Select Landline from the list

 

 

 

  1. Enter the number you want to enroll

 

 

 

  1. Click the check box to confirm the number

 

 

  1. Choose whether to prompt or call you automatically from the drop down menu

 

 

 

  1. Once enrolled there will be an enrollment successful notification

 

 

 

Congratulations! Your device is ready to approve Duo push authentication requests.

Duo Central

 

What is Duo Central?

Duo Central is a place to manage your DUO account and registered devices.

 

How do I Access Duo Central?

You can access Duo Central by visiting: https://cccs.login.duosecurity.com

 

For more information visit: https://duo.com/docs/duo-central

 

How to Manage Your Account.

  1. Log into https://cccs.login.duosecurity.com using your work email and password

 

 

  1.  Once successfully logged in select from the following options on the left-hand menu (highlighted in yellow).  ** do not use the buttons on the right these will not take you to the proper screens.  Only use the links highlighted on the left-hand menu.
    1. Add a new device
    2. My Settings and Devices

 

 

 

 

  1. After making your selection Duo will request that you authenticate with either a Push, Call, or Passcode.

 

  1. After authenticating follow the instructions to manage your devices

Authenticating with Duo

There are 3 ways to authenticate with Duo.

 

  1. Use a push notification through the mobile app.
  2. Onetime passcode
  3. Receive a phone call

 

Push notifications

Users may opt to receive a push notification which will send your phone a notification. The notification will open the Duo app on your mobile device to accept or deny a Duo request.

 

 

 

Onetime Passcodes

Alternatively users may want or need to authenticate using a onetime passcode which can be found in the Duo mobile app, sent via SMS text message, or through a hardware token.

 

 

 

Receive a Phone Call

If this option was selected as a default users will receive a phone call when trying to authenticate. Depending on the application users may have the option to choose to receive a phone call when authenticating.

 

 

Using Different Methods of MFA with DUO and Cisco AnyConnect VPN

 

AnyConnect VPN does not allow users to select how they would like to authenticate. If you wish to receive an alternative authentication method, you will have to provide the information in the password field of that application like the examples below.

 

If AnyConnect only prompts for a password, like so:

 

 

 

After you submit your login information, an authentication request is automatically sent to you via push to the Duo Mobile app or as a phone call.

Alternatively, you can add a comma (“,”) to the end of your password, followed by a Duo passcode or the name of a Duo factor. Here's how:

 

 

For more information visit: https://guide.duo.com/anyconnect

 

Any questions? Contact the ACC IT Helpdesk at 303-797-5900 or email [email protected] for further assistance.

Feedback
0 out of 0 found this helpful

scroll to top icon