Summary
This guide provides an overview of all the two-factor authentication (2FA) methods currently supported by BYU-Idaho through Duo. These methods offer enhanced security for accessing your accounts and services. By utilizing these diverse 2FA methods, you can ensure your accounts and data remain secure while enjoying the flexibility of choosing the authentication method that best suits your needs.
Duo Push
Description: Duo Push sends a notification to the Duo Mobile app on your smartphone or tablet. Approve the login request with a single tap.
How to Use:
- Install the Duo Mobile app.
- During login, select "Send Me a Push".
- Approve the notification on your device.
App Generated Passcodes
Description: Generate passcodes with the Duo Mobile app, even offline.
How to Use:
- Open Duo Mobile.
- Tap the account to reveal a passcode.
- Enter the passcode during login.
SMS Passcodes
Description: Log in using a passcode received from Duo in a text message. When you land on the text message page, it will show that a text message was just sent to you with a passcode. When you receive the message, enter that passcode into the space provided and click or tap Verify to log in to the application. When authenticating from a mobile device in the United States and Canada your browser may automatically enter the passcode for you. If you did not receive the text message from Duo, use the Send a new passcode link to try sending it again. Passcodes received in a text message expire when used.
How to Use:
- During login, select "Enter a Passcode".
- Choose "Text me new codes".
- Enter the SMS passcode.
Phone Call Approval
Description: Authenticate via phone callback. Answer the phone call from Duo and follow the voice instructions to log in to the application.
How to Use:
- During login, select "Call Me".
- Answer the call and follow the prompts.
Hardware Token Passcodes
Description: This is a legacy authentication method that was used previously. These were offered by BYU-Idaho as an alternative 2FA method when more practical options weren't available🠗🠗Hardware token are small keyfob0like devices that allow users to enter the passcode generated from the device.🠗🠗BYU-Idaho only supports this supports this authentication method for legacy users.
How to Use:
- Press the button on your hardware token.
- Enter the passcode during login.
Biometrics (Touch ID, Face ID, Windows Hello)
Description: BYU-Idaho supports biometric authentication methods that are integrated into your device for secure access to applications and services. These methods include Touch ID and Face ID for iOS and macOS users, Android Biometrics for Android users, and Windows Hello on Windows devices, and Android biometrics.
How to Use:
- Ensure biometrics are set up on your device.
- During login, use the biometric method prompted (fingerprint or facial recognition).
Security Keys
Description: Security keys are hardware devices used for authentication that enhance security by requiring physical possession of the key to access systems and applications. These keys provide a robust second factor method, ensuring that even if passwords are compromised, unauthorized access is prevented without the physical key.
How to Use:
- Register your security key with Duo.
- During login, insert and tap your security key.
Bypass Code
Description: If you're ever locked out of Duo and your other authentication methods have failed, the IT Service Desk can assist you by providing a temporary Bypass Code."🠗🠗These bypass codes are temporary and expire within a brief period after they're generated by the IT Service Desk.
How to Use:
- Obtain a bypass code.
- Enter the code during login.
Additional Resources
For detailed instructions on setting up and using each of these 2FA methods, please refer to the Duo Universal Prompt Guide.