What is Duo Mobile?
Auburn University uses Duo Security to prompt individuals for a secondary confirmation of their identity at log in using a physical device in their possession. This process is called multi-factor authentication, or MFA. The physical device may be a smartphone or tablet using an app, a text message to a phone, an automated voice call to landlines or cell phones, or a hardware token.
AU employees and students are strongly encouraged to register at least two alternative devices, such as a smartphone or cell phone number (as a landline) or a tablet.
Why Do I Need Duo Mobile?
Duo Mobile is a security requirement for AU employees and students. Duo Mobile uses multi-factor authentication to confirm your identity when accessing certain university resources.
Applications/Resources Requiring Duo Mobile
This is a partial list of software utilized by Auburn and whether it is protected by VPN or Duo MFA.
VPN Required:
- Banner Administration
- File Share (R Drive, etc.)
- IT Support/Remote Work
- Remote Desktop Protocol (RDP)
MFA Required (VPN is NOT Required):
- ServiceNow
- Box (Cloud Lock, etc.)
- Microsoft 365: Email (owa.auburn.edu and client based), Teams, OneDrive, etc. (Note: MFA will always be required, whether on or off campus, when accessing Microsoft 365 resources.)
- OIT Virtual Desktop Interface (VDI) (Horizon, Azure, Windows Virtual Desktop, etc.)
- Banner Self-Service (Human Resources Liaison may require VPN for some screens)
Auburn Credentials Required (VPN and Duo MFA Not Required):
- Canvas
- Panopto
- Zoom
- Kronos
Managing Devices in Duo Mobile
Once you have registered for Duo Mobile, you will be able to add additional verification methods, manage your existing devices, or reactivate Duo Mobile for Duo Push from the Duo Universal Prompt.
1. When logging in to an application with the Duo Universal Prompt, instead of responding to the authentication prompt, select the Other options link on the authentication page to view your list of available methods.
2. Select Manage devices at the end of the list to access the device management portal.
3. To access the device management portal, you will first need to verify your identity, just as you do when logging in to a Duo-protected resource or application. Select an available authentication option to verify your identity.
4. After approving a Duo authentication request, you will be able to see all of your registered devices in the device management portal.
If you do not have any devices you can use to authenticate to device management, contact the IT Service Desk at (334) 844-4944 for assistance.
Choose an option below for additional instructions on managing devices in Duo Mobile.
1. To add a new authentication method in Duo, select Add a device.
2. Duo takes you through the steps of adding the new device, just like first-time enrollment. In this example, we will add a new landline. Select Phone number.
3. Enter your phone number, check the box next to landline phone, and select Continue.
4. Enter an extension (optional), or if you do not have a specific landline extension, select Skip this step.
5. Verify that your number is listed correctly, and select Yes, it's correct.
6. You can now log in with Duo using a new device - in this example, you can log in using a phone call. Select Continue, and you will return to the device management page to view all of your registered devices, including the new one.
1. To rename a device, select Edit and then Rename to give a device a new name to help you identify it.
2. Enter the new device name, and select Rename.
3. The new name now shows up in the authentication method list in your device management portal. It will also show up on the authentication prompt when you log in with Duo to make it easier for you to identify when device you are using.
4. To delete a device, select Edit and then Remove. You will be able to confirm that you want to remove this device before deleting it.
Once deleted, an authentication device cannot be restored, but if you still have the device available, you can add it again. You cannot delete your only identity authentication device.
If you replaced your phone device with a new model but kept the same phone number, or if you received a new phone device with a new number, you can self-reactivate your existing device. For instructions, visit the Knowledge Base article Reactivating Duo Mobile.
If you have any issues with the self-reactivation process, contact the IT Service Desk at (334) 844-4944.