What is Duo Mobile?
Auburn University uses Duo Security for multi-factor authentication (MFA) to verify identity during login using a physical device. The physical device may be a smartphone or tablet using the Duo Mobile app, a text message to a cell phone, an automated voice call to a landline or cell phone, or a Duo hardware token. Users are encouraged to register at least two devices for backup. The Duo Mobile app is the recommended method for multi-factor authentication.
Why Duo Mobile Is Needed
Duo Mobile is a security requirement for Auburn University employees and students. Duo Mobile uses MFA to confirm your identity when accessing certain university resources.
Duo Mobile Minimum Requirements
- iOS: Version 16 or later
- Android: Version 11 or later
- Duo Mobile App: Version 4.85.0 or later
- Instructions for updating apps are in the Knowledge Base article: How to Update Apps on iOS and Android Devices.
For Auburn users who do not have a mobile phone or a landline, Duo tokens are recommended for basic Duo authentication. Please see the steps below to purchase and register a Duo token device.
Applications/Resources Requiring Duo Mobile
This is a partial list of software utilized by Auburn and whether it is protected by VPN or Duo MFA.
VPN Required:
- Banner Administration
- File Share (R Drive, etc.)
- IT Support/Remote Work
- Remote Desktop Protocol (RDP)
MFA Required (VPN is NOT Required):
- ServiceNow
- Box (Cloud Lock, etc.)
- Microsoft 365: Email (owa.auburn.edu and client based), Teams, OneDrive, etc. (Note: MFA will always be required, whether on or off campus, when accessing Microsoft 365 resources.)
- OIT Virtual Desktop Interface (VDI) (Horizon, Azure, Windows Virtual Desktop, etc.)
- Banner Self-Service (Human Resources Liaison may require VPN for some screens)
Auburn Credentials Required (VPN and Duo MFA Not Required):
- Canvas
- Panopto
- Zoom
- Kronos
Using a Duo Token
Most Auburn users find mobile phones convenient for Duo authentication; however, those without a mobile phone can use a Duo hardware token instead. Duo tokens are recommended only for Auburn users who do not have a mobile phone, tablet, or landline, yet still need to access applications or resources that require Duo security. For those with a mobile device, we recommend using the Duo Mobile app.
Step 1 - Obtaining a Duo Token:
Duo tokens are available for purchase from the Auburn University Bookstore. Tokens can be purchased using any payment method accepted by the AU Bookstore.
Below is an image of a Duo token:
Important: Once you have purchased a Duo token, visit the IT Service Desk for activation. The IT Service Desk is available to activate Duo tokens from 8:00 AM CT to 4:00 PM CT, Monday through Friday, and is located on the 3rd floor of the RBD Library (3010).
Once activated, you will use this token to access AU resources that require Duo multi-factor authentication.
Step 2 - Authenticating with a Duo Token:
1. To authenticate using a Duo token, go to auburn.edu/duo. If you had previously used a different authentication method, you may be prompted to authenticate with a different method, as shown below. To change to the Duo token authentication method, select Other options, and select Hardware token.
2. Press the button on your Duo token to generate a new passcode, and type it into the passcode field on the Duo prompt screen. Select Verify. You may then see an additional prompt asking if you would like to remember your device for future logins.
Each time you sign into an Auburn resource that requires Duo security, you will need to generate a new Duo passcode from your Duo token by pressing the green button.
Tokens can get "out of sync" if the button is pressed too many times in a row or if the generated passcodes are not used for login. If you have tried to generate a code several times and are still unable to log in, your Duo token may need to be resynced. To resync the Duo token, contact the IT Service Desk at (334) 844-4944 or visit us on the 3rd floor of the RBD Library (3010). Please remember to bring your Duo token with you.