What are the available 2FA authentication methods & devices?

Overview

Duo 2FA at the University of Illinois provides several methods for authentication so that you can use the one that works best for you.

Table of Contents

Authentication Devices

Smart Phone*

  • Requires the free DUO mobile app to be downloaded to your smartphone. 
  • DUO Push technology will send a push notification to the registered smartphone allowing you to approve or deny the request.
  • DUO Mobile Passcode can be used to generate passcodes with or without a network connection. Open the DUO Mobile app on your smartphone and select the down arrow to the right of the University of Illinois to generate a passcode.  Then enter that passcode on the 2FA authentication screen for the application you are trying to access.
  • Text new codes will send a passcode that can only be used one time on a login page.
  • Call Me will initiate a phone call to your smartphone.  Press any key to authenticate.
* If you do not want to provide a phone number for your smartphone, you can set it up as a tablet and it will provide the benefits listed below.
 
Tablet
  • Requires the free DUO mobile app to be downloaded to your tablet.
  • DUO Push technology will send a push notification to the registered smartphone allowing you to approve or deny the request.
  • DUO Mobile Passcode can be used to generate passcodes with or without a network connection.  Open the DUO Mobile app on your smartphone and select the down arrow to the right of the University of Illinois to generate a passcode.  Then enter that passcode on the 2FA authentication screen for the application you are trying to access.
Mobile Phone
  • Text new codes will send a passcode that can only be used one time on a login page.
  • Call Me will initiate a phone call to your landline phone.  Press any key to authenticate. 
Landline Phone
  • Call Me will initiate a phone call to your smart phone.  Press any key to authenticate.  This can not be a University phone number. 
Token
  • If none of the above are viable options you can request a token for authentication from the Webstore (for an additional cost to your department). Visit the token process for more information
  • Since the token is associated with an account, tokens cannot be shared. They can be re-assigned/transferred by following the same process as registering a token for the first time.
  • The Yubikey (USB-A & USB-C) and OTP C100 purchased through the WebStore are the only University of Illinois supported tokens.
     

How to Authenticate

The authentication prompt lets you choose how to verify your identity each time you log in. 

You will see a drop-down arrow on the right.  Select your device you would like to use and then your authentication method. There are two potential interfaces you might see, with very similar options.

authentication


 

Option 1 – DUO Push

Verify the device you will use to authenticate with, then select Send me a Push.

Duo Push

This option pushes a login request to your phone or tablet (If you have Duo Mobile installed and activated on your iPhone, Android, or BlackBerry device). Review the request and tap Approve to log in. For information on specific devices see Duo Mobile section.

Image of the DUO push request on an iPhone

Troubleshooting

You may have trouble receiving push notifications if there are network issues between your phone and the DUO service.  Phones will have trouble determining whether to use WiFi or data when checking for push requests.  Turning the phone to airplane mode and back to normal again can often resolve this type of issue if a reliable internet connection is available.

If you are expecting a notification and it hasn’t arrived, open the DUO mobile app and pull down on the screen to check for pending notifications.  Notifications expire after 60 seconds.

Make sure the Mobile app has permissions to show notifications on your device. For iOS devices, go to Settings > Notifications > Duo Mobile and validate that Alert Style is Banners or Alerts and Sounds, as well as Show on Lock Screen, are enabled.

 

Option 2 – Phone Call

Verify the device you will use to authenticate with, select Call Me.  You must be near this phone when you log in.  A phone call will be made to this phone.  Upon answering, push any number to acknowledge the login.  Note – University phone numbers cannot be used for phone call back.

phone call
 

Option 3 – Text Me

For Microsoft 365 applications

Follow the below steps if trying to receive a text message from an O365 Application:

  1. Select Enter a Passcode

    MS365
     
  2. Select Text me new codes. Once the text message is received you will enter it in the white box below (ex.867539) and select Log In.

 

For Other Applications

For other applications, a different interface is seen. For these applications:

  1. Select Text me from the authentication screen.

    text me
     
  2. You will be sent a text message with the passcode.

    Image of iPhone text message received with UI Verify passcode.
     
  3. Enter the generated passcode that was sent to your mobile device into the passcode field below and select Enter.

    text me

 

Option 4 – Passcode

Generated with DUO Mobile

When you don't have a strong wireless signal and the push notification isn't working, you can generate a code directly from the DUO Mobile app.

  1. Select the down arrow next to the "University of Illinois" on the DUO Screen.

    duo app passcode

     
  2. Select Use/Enter a Passcode from the Authentication Screen.

    Use a passcode


     
  3. Enter the generated passcode from the Duo Mobile app into the passcode field below and select Enter.

    authentication with passcode from duo mobile app

 

Temporary Passcode sent via Service Desk

If you forgot your authentication method, you can call your University Service Desk to receive a temporary passcode.   The Service Desk will ask you specific questions to validate your identity and then a code to your email.

  1. Select Use a Passcode from the Authentication Screen.

    Use a passcode
  2. Enter the emailed passcode from the Service Desk into the passcode field below and select Enter

    Enter the passcode


Temporary Code sent via Recovery Email

If you forgot your authentication method and have set up a recovery option, you can have a temporary code sent to a non-university email address. 

  1. Select Get a temporary code

    temporary bypass code
     
  2. Select Send code

    send code
     
  3. Retrieve code from non-university email box

    temporary code
     
  4. Enter the temporary passcode and select Enter

    Enter Temporary Code

 

Option 5 – Hardware Token

Hardware tokens can be useful in particular circumstances, such as when traveling internationally, or when the other options above do not fit your needs. You can find more information on obtaining and using these hardware tokens at What are 2FA Hardware Tokens?

Yubikey:

Select your Yubikey from the drop down and have the yubikey in your USB port.  With the cursor in the field below, press the gold button on your yubikey

yubikey


C100:

Select your C100 from the drop down.  Press the red button on the C100 and enter the 6 digit code in the field below and select Enter.

yubikey

Details

Article ID: 758
Created
Fri 1/15/21 6:06 PM
Modified
Tue 8/17/21 12:48 PM