Duo08 Duo Faqs
Duo08 Duo Faqs
Duo08 Duo Faqs
Authentication
FAQs
This document contains frequently asked questions (FAQs) about the Duo Multi-
Factor Authentication service at Towson University. These FAQs are maintained
by the Office of Technology Services (OTS).
Duo Multi-Factor Authentication: FAQs
TABLE OF CONTENTS
INTRODUCTION ..................................................................................................................................................... 4
What is Duo Multi-Factor Authentication, and why is Towson University using it? ...............................................4
How does it work?.....................................................................................................................................................4
Who is required to use Duo?.....................................................................................................................................4
Can I opt out of Duo? ................................................................................................................................................4
Which systems require MFA?....................................................................................................................................4
Where can I go for more information, training or support? .....................................................................................4
ENROLLING AND MANAGING YOUR DEVICES ........................................................................................................ 5
Do I need to do anything to set up Duo, or is it automatic? ...................................................................................5
What mobile devices are supported? ......................................................................................................................5
If I don't have a supported mobile device, what options do I have for using Duo? ..................................................5
How many devices can I register? .............................................................................................................................5
I am unable to install the Duo application on my mobile device because my device is not supported or not
running a recent operating system. What can I do? ................................................................................................5
Can I enroll a shared device? ....................................................................................................................................5
How do I enable or disable the option for Duo to automatically push notifications or call my phone. ...................5
How do I add devices, remove devices, change my default device, or change the name of a device in Duo? ........6
Is the Duo mobile app free? When I try to get Duo from the Apple App Store, I’m asked for payment
information. ..............................................................................................................................................................6
I’m leaving the university. Do I need to do anything with Duo? ...............................................................................6
Should I allow my Duo mobile app to update automatically? ..................................................................................6
AUTHENTICATING WITH DUO ................................................................................................................................ 6
What is the recommended method of authenticating? ...........................................................................................6
What is the "Remember me for xx days" option in the Duo prompt? ....................... Error! Bookmark not defined.
I received multiple codes when I used the SMS (text) method. How do I use them and will they expire? .............6
If I use the text message or phone call option, will I be charged by my phone company?.......................................7
Can I use the Duo mobile app for protecting non-Towson services like DropBox or Google? .................................7
OUTLOOK, MOBILE EMAIL/CALENDAR, OFFICE 365 AND SKYPE ............................................................................. 7
What email and calendar applications can I use with Office 365 after I'm enrolled in Duo? ...................................7
I have Outlook 2013 at home and it will not log in after I enrolled in Duo. ..............................................................7
Will I be frequently prompted for Duo authentication from Outlook, Skype or OneDrive on my desktop or mobile
device? ......................................................................................................................................................................7
Where can I learn more about the Outlook mobile app? .........................................................................................8
Can I use IMAP/POP after I'm enrolled in Duo? ........................................................................................................8
I'm running a version of Windows or Mac OS that won't support Outlook 2016. ....................................................8
Will Skype for Business continue to work after I'm enrolled in Duo? .......................................................................8
Do I need to change anything with the OneDrive sync client on my desktop after I'm enrolled in Duo? ................8
Will other mobile apps that interact with Office 365 be affected after I'm enrolled in Duo? ..................................8
TRAVELING ............................................................................................................................................................ 9
I travel internationally. How does this affect my ability to log in with Duo? ............................................................9
How do I authenticate with my smart phone app if I don't have cell signal, data, or a reliable Wi-Fi connection? .9
Can I enroll an international phone number? What countries will Duo be available in? ........................................9
ACCESSIBILITY ........................................................................................................................................................ 9
How does Duo meet accessibility requirements? .....................................................................................................9
OTS Publication: duo08 • 05/16/17 • Training@Towson.edu • Office of Technology Services
© 2017 Towson University This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs License.
Details available at http://www.towson.edu/OTStraining
Duo Multi-Factor Authentication: FAQs
Introduction
What is Duo Multi-Factor Authentication, and why is Towson University using it?
Multi-Factor Authentication (MFA) requires an additional step to prove the identity of the person
logging in. Towson University has chosen Duo Security's MFA solution to improve the security of our
systems. Towson is joining the growing number of businesses and universities that are relying on MFA
to protect their services, their data, and their users. Passwords are often compromised because of
phishing, malware and other types of attacks. Verifying your identity with Duo prevents anyone else
from logging in as your NetID - even if they know your password.
4
Duo Multi-Factor Authentication: FAQs
If I don't have a supported mobile device, what options do I have for using Duo?
You do not need to have a mobile device to use Duo. Landlines (like an office or home phone) can be
used to authenticate via a phone call. In limited circumstances, a hardware token (a small electronic
device that may be attached to a keychain and generates a code) can be requested by contacting the
OTS Faculty/Staff Help Center by submitting a TechHelp request or by phone at 410-704-5151.
How do I enable or disable the option for Duo to automatically push notifications
or call my phone.
Visit the NetID Tools page (towson.edu/NetID), click the "Enroll and Manage Duo Devices" link, and
authenticate to manage your devices. You may disable automatic behavior, or switch between push
notifications or phone calls.
Duo self-help resources: http://www.towson.edu/technology/training/resources/duo.html
5
Duo Multi-Factor Authentication: FAQs
How do I add, remove, change the name of, or change my default device in Duo?
Visit the NetID Tools page (towson.edu/NetID), click the "Enroll and Manage Duo Devices" link, and
authenticate to manage your devices.
Duo self-help resources: http://www.towson.edu/technology/training/resources/duo.html
Is the Duo mobile app free? When I try to get Duo from the Apple App Store, I’m
asked for payment information.
Yes, the Duo mobile app is free. The Apple App Store does require payment information on record
even when downloading a free app.
I don't want to log in every day. How do I get Duo to "remember me" for an
extended period of time?
Authenticating with Duo through a web browser, you may see a "Remember me for 30 days" option. If
the computer is not a shared or public machine, you can enable this option to avoid Duo
authentication requests for up to 30 days. This will remain in effect as long as you are authenticating
on the same computer/browser and do not clear browser cookiesIf you configured Duo to automatically
call your phone or send you a push notification, the "Remember me for 30 days" option may be grayed
out or hidden when the Duo prompt first appears. You must click "Cancel" on the blue bar, and repeat
the authentication process to access the “Remember me” checkbox.
I received multiple codes when I used the SMS (text) method. How do I use them
and will they expire?
By receiving multiple codes in one text message, you avoid having to receive a new text for every
authentication attempt. You can use each passcode in order, one at a time, using the "Passcode"
option when logging into Duo. The passcodes are valid for one year after they are sent.
6
Duo Multi-Factor Authentication: FAQs
If you cannot find the previous text message, you can send yourself a new text message with a new
set of codes at any time.
Self-help document:
http://www.towson.edu/technology/training/resources/documents/duo/duo05-duo-authentication.pdf
If I use the text message or phone call option, will I be charged by my phone
company?
If you use the text message option and do not have an “unlimited” message plan, then you will be
charged for the text message. There are up to two mandatory texts to set up Duo on your phone.
After that, you only get texts if you choose to authenticate using passcodes from a text message.
If you are charged for voice minutes on your device, then you will be charged for each call from Duo
when you authenticate by phone call. The calls should be very brief (under one minute each). You will
not be charged for using text messages or phone calls on any Towson-owned device.
Can I use the Duo mobile app for protecting non-Towson services like DropBox
or Google?
Yes. You can use the Duo app for handling multi-factor authenticating for other services, not affiliated
with TU, such as DropBox, Google, LastPass and others. You can read more at
https://guide.duo.com/third-party-accounts.
I have Outlook 2013 at home and it will not log in after I enrolled in Duo.
We recommend upgrading to Office 2016 by downloading and installing the latest version of Office
through Office 365 (http://office.towson.edu). If you are using Outlook 2013 off-campus and cannot
upgrade to Outlook/Office 2016 through Office 365 (http://office.towson.edu), you may need to
submit a TechHelp service request (http://techhelp.towson.edu) for a software fix to make Outlook
2013 compatible.
7
Duo Multi-Factor Authentication: FAQs
I'm running a version of Windows or Mac OS that won't support Outlook 2016.
How can I access my account through Outlook 2016?
You can use Outlook 2016 through Virtual Workspace (http://vw.towson.edu), or access your account
through Outlook on the Web App (http://outlook.towson.edu).
Will Skype for Business continue to work after I'm enrolled in Duo?
You will need to use Skype for Business 2016 (for Windows or Mac), the latest Skype for Business
mobile app (iPhone, Android, Windows Phone), or sign into Skype using Outlook on the Web
(http://outlook.towson.edu). You can download and install Skype for Business 2016 at home through
Office 365 (http://office.towson.edu).
Do I need to change anything with the OneDrive sync client on my desktop after
I'm enrolled in Duo?
No. Your OneDrive sync client will continue to function without any changes. The next time your
OneDrive client needs you to enter your password, it may also require Duo authentication.
Will other mobile apps that interact with Office 365 be affected after I'm enrolled
in Duo?
If you use any of the mobile apps that interact with your Towson Office 365 account, you may
occasionally be prompted for Duo authentication after it prompts you for your password. Mobile apps
that may connect to your Towson Office 365 account include Outlook, OneDrive, SharePoint, OneNote,
Word, Excel and PowerPoint.
8
Duo Multi-Factor Authentication: FAQs
Traveling
I travel internationally. How does this affect my ability to log in with Duo?
Using the Duo mobile app (available for smartphone or tablet), you can generate passcodes even if
you don't have an Internet, Wi-Fi, or a cellular connection. If you're traveling internationally (or have
an international phone number), and are using text messages or phone calls as your authentication
method, you may be subject to your carrier's roaming charges. Use of text messages or phone calls is
not recommended for international travelers.
You may also pre-create emergency Duo passcodes by using the tool on the NetID Tools page
(towson.edu/NetID). These codes are good for 180 days, can be used only one time each, and you
may carry them in your wallet or email them to a personal email account for future reference.
Self-help documents:
http://www.towson.edu/technology/training/resources/documents/duo/duo05-duo-authentication.pdf
http://www.towson.edu/technology/training/resources/documents/duo/dou10-emergency-
passcodes.pdf
How do I authenticate with my smart phone app if I don't have cell signal, data, or
a reliable Wi-Fi connection?
Using the Duo mobile app (available for smartphone or tablet), you can generate passcodes even if
you don't have an Internet, wi-fi, or a cellular connection.
Self-help document: http://www.towson.edu/technology/training/resources/documents/duo/duo05-
duo-authentication.pdf
Can I enroll an international phone number? What countries will Duo be available
in?
International phone numbers are not guaranteed to work. Towson University incurs a cost for phone
calls and text messages for Duo authentication. Duo publishes their phone and text rates (in "credits")
at https://duo.com/docs/telephony_credits#rate-card, and Towson blocks international phone calls or text
messages which exceed 20 credits. This limit is subject to change.
Accessibility
How does Duo meet accessibility requirements?
The Duo authentication and device management options are keyboard-accessible and screen reader-
compatible. You can read more on how Duo meets accessibility requirements at
https://duo.com/docs/accessibility.
9
Duo Multi-Factor Authentication: FAQs
Security
What should I do if I get any unexpected Duo authentication attempts (like a push
notification, text message or phone call)?
You should deny the request and report it to the OTS Help Center at 410-704-5151. For push
notifications, click the red "X" to deny the request, and choose the "Fraud" option if prompted. For
phone calls, press "9" to report the fraudulent attempt. Someone may have compromised your
password and may be trying to use it to log in to services protected by Duo. Please change your
Towson NetID password immediately using the link on the NetID Tools page (towson.edu/NetID).
• If your phone number has remained the same, and you only use the phone for text (SMS)
messages or phone calls for Duo, then you do not need to do anything. You will authenticate
with Duo exactly as you did on your old phone.
• If your phone number has changed, you will want to enroll the phone as a new Duo device,
and remove the old phone device from Duo. Visit the NetID Tools page (towson.edu/NetID),
click the "Enroll and Manage Duo Devices" link.
• If your phone is a smartphone and the Duo mobile app was removed and needs to be
reinstalled, you will want to reinstall the Duo mobile app and reactivate it for your Towson
account. To reactivate the Duo app, visit the NetID Tools page (towson.edu/NetID), click the
"Enroll and Manage Duo Devices" link.
Self-help document:
http://www.towson.edu/technology/training/resources/documents/duo/duo06-duo-managing-
devices.pdf
I lost my mobile device that I use for Duo. What should I do?
Contact the OTS Help Center at 410-704-5151 immediately if you lose your phone or suspect it has
been stolen. If you have enrolled multiple devices in Duo, you can visit the NetID Tools page
(towson.edu/NetID), click the "Enroll and Manage Duo Devices" link, then authenticate to manage
your devices (and remove the lost device).
If you do not have multiple devices enrolled, the Help Center can provide you a temporary passcode
to allow you to log in, remove the old device, and enroll a new device.
If you had previously used the Pre-Create Emergency Duo Passcodes app on the NetID Tools page
(towson.edu/NetID), you can use those passcodes to log in temporarily.
10
Duo Multi-Factor Authentication: FAQs
Self-help documents:
http://www.towson.edu/technology/training/resources/documents/duo/duo06-duo-managing-
devices.pdf
http://www.towson.edu/technology/training/resources/documents/duo/dou10-emergency-
passcodes.pdf
How do I authenticate with my smart phone app if I don't have cell signal, data, or
a reliable Wi-Fi connection?
Open the app on your phone or tablet and press the expand arrow beside Towson University. A code
will appear. When authenticating through DUO, click the Enter a Passcode button and enter the
number generated by the app in this field.
Why didn't my browser remember me even though I had previously enabled the
"Remember me for xx days" option?
If your browser is not remembering that you enabled the “Remember Me" option in the Duo prompt,
your browser may not be set up properly to retain cookies for Duo. You may want to add
"duosecurity.com" as a trusted website for which the browser accepts cookies, or disable the browser's
configuration to delete history/cookies upon closing. Each browser has a different method of trusting a
website, so please contact the OTS Help Center at 410-704-5151 if you need assistance.
Also, if you enable the "Remember Me" option in a private browsing session (such as Chrome
Incognito, Firefox private window, or Internet Explorer/Edge inPrivate), the browser will not remember
you outside of that browser session.
11
Duo Multi-Factor Authentication: FAQs
The “Remember Me” setting has no impact on the Office desktop or mobile client applications
(Outlook, OneDrive, Skype for Business). These applications will remember your Duo authentication
automatically until the next time you change your password.
What can I do if I have stopped receiving push notifications on the Duo mobile
app?
There are a few different reasons push notifications may not arrive. Try the steps below, then contact
the OTS Help Center at 410-704-5151 if you still need assistance.
• Make sure you have Internet access (such as by trying to reach another service, like
google.com).
• Many phones have trouble determining whether to use the Wi-Fi or cellular data channel when
checking for push requests. Simply turning the phone to airplane mode and back to normal
operating mode again often resolves this issue, if there is a reliable Internet connection
available. Similarly, the issue may be resolved by turning off the Wi-Fi connection on your
device and using the cellular data connection.
• Check the time and date on your phone and make sure they are correct. If the date and time
on your phone are manually set, try changing your device's configuration to sync date and
time automatically with the network.
• Try re-activating the Duo mobile app. Visit the NetID Tools page (towson.edu/NetID), click the
"Enroll and Manage Duo Devices" link, then authenticate using a different device (or use the
phone call or text message option if the phone number hasn't changed). Click "Device
Options" next to your phone device, then click "Reactivate Duo Mobile," and follow the
prompts.
• If the cellular data is not enabled for the Duo app, push notifications will not work unless you
are connect to wi-fi.
• The Duo Knowledge Base has additional iOS and Android troubleshooting steps.
12
Duo Multi-Factor Authentication: FAQs
How can I activate the Duo mobile app on my smartphone if the camera is broken
or the QR code won't scan?
You can enroll your smartphone directly from that same mobile device itself to avoid the need for a
camera. In the web browser on the mobile device, visit the NetID Tools page (towson.edu/NetID),
click the "Enroll and Manage Duo Devices" link, then enroll your smartphone. Instead of a being
required to use the camera to scan a QR code, you will be given a link that automatically opens and
configures your Duo mobile app.
If you still wish to use the computer to enroll your mobile device, but the QR code won't scan, click
the "Have an activation link emailed to you instead" option next to the QR code. Then, open that email
on your mobile device to activate the Duo mobile app without the need to scan the QR code.
13