Duo is required for all current UAH faculty, staff, and Graduate Teaching Assistants and will be required of all students by June 9, 2023. It is used when attempting to log into a Single Sign-On authenticated service (such as myUAH). It is also required for using classroom podium computers.

Please note that because you will scan a QR code, it is best to setup your Duo account on a computer, not a mobile device.

Step 1 – Log into SSO

Visit an online system protected by Single Sign-On (SSO) such as my.uah.edu.

Step 2 – Start Setup

You'll be greeted by a welcome screen from Duo. Click Next to progress through the introduction.

Step 3 – Select Authentication Option

Select a method for authentication. You'll be able to add additional authentication methods later. Read more about the differences between each method below.

OIT strongly recommends choosing Duo Mobile.

Step 4 – Enter Phone Number

If you select Duo Mobile or Phone number, you will be prompted to enter your phone number. You'll need to confirm that you own the phone by either entering a passcode that is texted to you or by recieving an automated phone call.

If you are using Duo Mobile with a tablet, click I have a tablet.

Step 5 – Download Duo Mobile

If you selected Duo Mobile as your authentication method, you'll need to download the Duo Mobile app from the App Store or Google Play. Click Next once you've installed the app.

Step 6 – Activate App

Once you've installed the app on your smartphone or tablet, open the app. If this is your first time using the Duo Mobile app, you'll be greeted by a welcome screen. Select Continue, then Use a QR code. If you are not shown the welcome screen, simply press + Add near the top-right of the screen.

    

Allow access to your device's camera if necessary, then use it to scan the QR code displayed on your computer screen. You can set the Account name to a name of your choice, then press Save.

Step 7 – Success!

You will receive a success message confirming that you've successfully added this authentication method. If you chose to add Duo Mobile, text message and phone call verification is added automatically.

After clicking Continue, you will have the option to add another authentication method. This is optional, though OIT recommends having at least two authentication methods (eg. Duo Mobile and Phone number or Duo Mobile and Touch ID).

Step 8 – Done! You are ready to use Duo!

You’re ready to use Duo!

With Duo activated on your account and with your device enrolled, you are ready to use Duo when logging into Duo enabled services.

Authentication Options

Upon logging in to a Single Sign-On application, Duo chooses one of your configured login options automatically, selecting the most-secure method from the ones you have available. For example, if you have only Duo Mobile and text message/phone call verificaiton configured, Duo will automatically select Duo Push as the most secure authentication method.

You can also click Other options to select an alternative method of authentication. Read about these authentication methods below:

Duo Push

Install the Duo Mobile app on your smartphone or tablet to receive push notifications. Once this is installed, and you attempt to log into a Duo enabled service, you’ll receive a push notification on your smartphone or tablet. Open the notification, and you’ll see a green checkmark, and a red x. Simply tap the green checkmark to gain access.

Duo Mobile passcode

You can use the Duo mobile app to generate passcodes. This option does not require Wi-Fi or data, so this is a great option if you’re traveling or if you have limited or no cell/internet service. Open your Duo mobile app, tap the key icon, and it will reveal a passcode. Log into the Duo enabled service, choose the enter a passcode option, enter the code, and you’re in!

If you do not have your device with you, don’t worry. You can contact the OIT Help Desk to obtain temporary access codes. These passcodes can be entered in the Duo prompt on your computer.

Text message passcode

Choose this option to receive a text with a passcode on your mobile phone.

Phone call

Choose this option to receive a phone call on your mobile or landline phone. When you choose this option, Duo will call your phone, and you can press 1 to allow access or 9 to report a fraudulent login attempt.

Bypass code

If you lose access to your Duo devices adn are unable to log in, contact the OIT Help Desk. You may be provided a bypass code to enter into the Duo Prompt in order to re-gain access to your account.

Touch ID

If you have a recent MacBook with Touch ID, you can use Touch ID for Duo with the Google Chrome browser (and probably chrome based browsers). Duo provides instructions for Touch ID here.

Requirements for Touch ID:

  • Support for Touch ID authentication is limited to web applications that show Duo's inline browser prompt.
  • A MacBook Pro or MacBook Air with a Touch ID button.
  • A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
  • Chrome 7.0 or later. Safari and other browsers on macOS are not supported.

If you clear your passwords along with the browser cache, you'll have to set up the Touch ID again.

You are given the option to use your Apple credentials instead of your Charger ID and password.

Hardware Token (faculty/staff only)

A Duo hardware token is a small device the size of a keychain fob. Pressing the button on the device will generate a passcode which can be entered into the Duo prompt. Support for hardware tokens is not provided to students. UAH faculty and staff may request a hardware token from the OIT Help Desk.

Note that tokens can get "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login. If your token stops working, contact the OIT Help Desk.

Read more about using Duo hardware tokens here.

Security Key

The following excerpt comes from Security Keys and Duo:

"A security key plugs into your USB port and when tapped or when the button is pressed it sends a signed response back to Duo to validate your login. Duo uses the WebAuthn authentication standards to interact with your security keys. You may also see WebAuthn referred to as "FIDO2"."

OIT does not provide support for security keys. However, users may choose to use their own with Duo. Read more about using security keys with Duo here.

How Do I Change Settings or Enroll Another Device

To change settings or enroll another device, log into myUAH or any Duo-protected service. When you get to the Duo prompt, click the Settings button and choose to add a new device or access your settings.

Have additional questions?

Check out our frequently asked questions page to learn more, or submit a service request to the OIT Help Desk.