Overview
Duo 2FA at the University of Illinois provides several methods for authentication so that you can use the one that works best for you.
Table of Contents
Authentication Devices
Smart Phone*
- Requires the free DUO mobile app to be downloaded to your smartphone.
- DUO Push technology will send a push notification to the registered smartphone allowing you to approve or deny the request.
- DUO Mobile Passcode can be used to generate passcodes with or without a network connection. Open the DUO Mobile app on your smartphone and select the down arrow to the right of the University of Illinois to generate a passcode. Then enter that passcode on the 2FA authentication screen for the application you are trying to access.
- Text new codes will send a passcode that can only be used one time on a login page.
- Call Me will initiate a phone call to your smartphone. Press any key to authenticate.
* If you do not want to provide a phone number for your smartphone, you can set it up as a tablet and it will provide the benefits listed below.
Tablet
- Requires the free DUO mobile app to be downloaded to your tablet.
- DUO Push technology will send a push notification to the registered smartphone allowing you to approve or deny the request.
- DUO Mobile Passcode can be used to generate passcodes with or without a network connection. Open the DUO Mobile app on your smartphone and select the down arrow to the right of the University of Illinois to generate a passcode. Then enter that passcode on the 2FA authentication screen for the application you are trying to access.
Mobile Phone
- Text new codes will send a passcode that can only be used one time on a login page.
- Call Me will initiate a phone call to your landline phone. Press any key to authenticate.
Landline Phone
- Call Me will initiate a phone call to your smart phone. Press any key to authenticate. This can not be a University phone number.
Token
- If none of the above are viable options you can request a token for authentication from the Webstore (for an additional cost to your department). Visit the token process for more information.
- Since the token is associated with an account, tokens cannot be shared. They can be re-assigned/transferred by following the same process as registering a token for the first time.
- The Yubikey (USB-A & USB-C) and OTP C100 purchased through the WebStore are the only University of Illinois supported tokens.
How to Authenticate
The authentication prompt lets you choose how to verify your identity each time you log in.
You will see a drop-down arrow on the right. Select your device you would like to use and then your authentication method. There are two potential interfaces you might see, with very similar options.
Option 1 – DUO Push
Verify the device you will use to authenticate with, then select Send me a Push.
This option pushes a login request to your phone or tablet (If you have Duo Mobile installed and activated on your iPhone, Android, or BlackBerry device). Review the request and tap Approve to log in. For information on specific devices see Duo Mobile section.
Troubleshooting
You may have trouble receiving push notifications if there are network issues between your phone and the DUO service. Phones will have trouble determining whether to use WiFi or data when checking for push requests. Turning the phone to airplane mode and back to normal again can often resolve this type of issue if a reliable internet connection is available.
If you are expecting a notification and it hasn’t arrived, open the DUO mobile app and pull down on the screen to check for pending notifications. Notifications expire after 60 seconds.
Make sure the Mobile app has permissions to show notifications on your device. For iOS devices, go to Settings > Notifications > Duo Mobile and validate that Alert Style is Banners or Alerts and Sounds, as well as Show on Lock Screen, are enabled.
Option 2 – Phone Call
Verify the device you will use to authenticate with, select Call Me. You must be near this phone when you log in. A phone call will be made to this phone. Upon answering, push any number to acknowledge the login. Note – University phone numbers cannot be used for phone call back.
Option 3 – Text Me
Option 4 – Passcode
Generated with DUO Mobile
When you don't have a strong wireless signal and the push notification isn't working, you can generate a code directly from the DUO Mobile app.
- Select the down arrow next to the "University of Illinois" on the DUO Screen.
- Select Use/Enter a Passcode from the Authentication Screen.
- Enter the generated passcode from the Duo Mobile app into the passcode field below and select Enter.
Temporary Passcode sent via Service Desk
If you forgot your authentication method, you can call your University Service Desk to receive a temporary passcode. The Service Desk will ask you specific questions to validate your identity and then a code to your email.
- Select Use a Passcode from the Authentication Screen.
- Enter the emailed passcode from the Service Desk into the passcode field below and select Enter
Temporary Code sent via Recovery Email
If you forgot your authentication method and have set up a recovery option, you can have a temporary code sent to a non-university email address.
- Select Get a temporary code
- Select Send code
- Retrieve code from non-university email box
- Enter the temporary passcode and select Enter
Option 5 – Hardware Token
Hardware tokens can be useful in particular circumstances, such as when traveling internationally, or when the other options above do not fit your needs. You can find more information on obtaining and using these hardware tokens at What are 2FA Hardware Tokens?
Yubikey:
Select your Yubikey from the drop down and have the yubikey in your USB port. With the cursor in the field below, press the gold button on your yubikey
C100:
Select your C100 from the drop down. Press the red button on the C100 and enter the 6 digit code in the field below and select Enter.
