Duo MFA: Overview of authentication methods

Overview

There are lots of different Duo verification methods available. LITS recommends that students, faculty, and staff have at least two methods set up in order to minimize the likelihood that you need to reach out for support when your devices change. Alums are only eligible for the SMS text message method. 

This article explains the available Duo verification methods for students, faculty, and staff and for alums

 

Students, faculty and staff

Verification methods

VERIFICATION METHOD NOTES LITS SUPPORT
Verified Duo Push
(using the Duo Mobile app)
Recommended 
  • Shows you a 3-digit number on the screen where you're logging in and prompts with a push notification on your phone to enter that 3-digit number.
    • If you're logging in on the same device where you have the Duo Mobile app set up, you'll be prompted for Mobile Inline Authentication instead (see next row in the table). 
  • Requires an Android or iOS device compatible with the Duo Mobile app.
  • Users can set up multiple devices with the Duo Mobile app (ex. a phone and a tablet).
  • Can operate on WiFi / Does not require cellular data to function.
  • Allows you to log into Duo-protected services on any device, so long as you have your phone/tablet with you.

If you haven't set up Duo yetenroll in Duo and set up the Duo Mobile app for Verified Duo Push.
If you already have another method configured, you can manage your devices to set up the Duo Mobile app.

Full
Mobile Inline Authentication 
(using the Duo Mobile app)
Used automatically when logging in on the device you've set up with the Duo Mobile app 
  • This verification method is presented when a user is logging into a Duo-protected application on the same mobile device where they have Duo Mobile set up
  • Instead of being shown a three-digit number and then entering it into the Duo Mobile app, you'll just be shown a prompt to open Duo Mobile and then to "Approve" or "Deny" the authentication. 

Read more and see screenshots.

Full
Hardware Token passcode Alternate 
  • Available upon request to faculty and staff who aren't able to use the Duo Mobile app.
  • Does not require WiFi or cellular data.
  • Allows you to log into Duo-protected services on any device, so long as you have the hardware token with you.
Full
SMS text message passcode Alternate
  • Available upon request to students who aren't able to use the Duo Mobile app.
  • Requires cell signal and ability to receive SMS text messages.
  • Allows you to log into Duo-protected services so long as you have your phone with you and can receive texts.
Full
Platform authenticators
(ex. Touch ID, Windows Hello, Android Biometrics, iCloud Keychain)
Extra / Convenience
  • Availability depends on your device(s).
  • Requires WiFi / internet connection.
  • Allows you to log into Duo-protected services ONLY on the device(s) where they are already configured.
  • Should NOT be your only configured verification methods as they do not allow you to complete Duo verification on other devices (like a classroom or lab computer).

Want to add a platform authenticator? Manage your Duo devices.

Best effort
Bypass Code Fail safe
Will be the only option if you have no configured verification methods, OR if your other verification methods are not available.
  • If you have other verification methods configured elsewhere, follow the manage devices instructions to add additional verification methods (like Verified Duo Push) so you can access Duo-protected services on that device.
  • If you don't have other verification methods, open an MHC Account access support ticket. Usually we'll work with users to get their verification methods updated to support future login success rather than providing a bypass code as a "band aid" solution.
Full
6-digit Passcode (in the Duo Mobile app) Not available
While your Duo Mobile app will continually generate new 6-digit passcodes, MHC does not allow users to complete verification using that method. Simply ignore the passcodes generated in the app. 
N/A 
Phone call Not available
This Duo verification method is not available at MHC.
N/A

 

 Selecting a different Duo method than the one that is offered

If you've configured several verification methods for Duo (as is recommended for students, faculty, and staff), then you may find that you want to use a different one from what is offered to you by default in a given scenario. 

The method you use most often on a given device or application will be the one that is offered by default. You can always decide to use another available verification method that you've configured. 

When prompted for Duo verification, select Other options and then select the listed verification method of your choice. 

Screenshot of the duo mobile screen offering a verified push. The Other options button is circled in red. To the right an arrow indicates that the second Duo screen on the right is what you see after choosing Other options. Several other Duo verification options are offered.

 

 

Alums

Verification methods

VERIFICATION METHOD NOTES LITS SUPPORT
SMS Text message passcode
Recommended
  • Requires cell signal and ability to receive SMS text messages.
  • Allows you to log into Duo-protected services so long as you have your phone with you and can receive texts.
Full
Phone call
Alternate
  • Requires cell signal and the ability to receive a call. 
  • If you have a phone that can't receive texts/landline phone, you can set it up for Duo the first time you log into DASH if you didn't provide a recovery phone number when you claimed your account for DASH
  • Phone call is available as an alternate method for any alum with a phone number set up for Duo. If you are prompted to complete Duo with a text message and want to do a phone call instead, choose "Other options" and then select "Phone call". You'll receive a call and be instructed to press a key to complete the verification.
Full
Bypass Code Fail safe
A bypass code will be the only alternative Duo offers if you don't have access to the phone number associated with your MHC Duo account​​​​​​. Open an MHC Account access support ticket or call the LITS Technology Help Desk at 413-538-2600 for support. Usually we'll work with alums to get their phone number updated in Duo to support future login success rather than providing a bypass code as a "band aid" solution.
Full
Duo Mobile app (for Verified Duo Push or 6-digit passcodes) Not available N/A
Hardware Token passcode Not available  N/A
Platform authenticators
(ex. Touch ID, Windows Hello, Android Biometrics, iCloud Keychain)
Not available N/A
Phone call Not available  N/A

 

Print Article

Related Articles (6)

Instructions for new members of the MHC Community getting set up with their MHC Account for the first time.
Instructions to help NEW users enroll in Duo for the first time and configure the Duo Mobile app with Duo Push notifications.
Answers to frequently asked questions about Duo multi-factor authentication at MHC.
Instructions for users who need to manage their Duo-enabled devices and configure additional verification methods.
Instructions on how to help users update their Duo Mobile app to the latest version.
An introduction to multi-factor authentication and the two systems that MHC uses to protect accounts: Google 2-step verification and Duo MFA.

Related Services / Offerings (1)

Even if you’re traveling, you can still connect to MHC's network over the internet safely and securely to access the same resources you normally use on campus.