This article explains how to set up Duo multi-factor authentication for
NEW users. If you have already enrolled in Duo MFA and are having trouble, review the
MHC Account access support page.
Overview
This article explains how to set up Duo multi-factor authentication using the Duo Mobile app and Verified Duo Push notifications for NEW users.
There are other Duo MFA verification methods that users can set up on their own, including biometric verification methods like Touch ID and Windows Hello, but LITS recommends starting with the Duo Mobile app. If you do not have a smart phone, or if you have questions about the compatibility of your device, please request an alternate Duo verification method.
How to enroll
This process requires a web browser and a smart phone on separate devices, and you will switch between the two devices during set up.
It is important to follow the instructions exactly and finish them all in one sitting. If you deviate or stop partway through, you will hit a wall where Duo asks you for a Bypass code. If this happens for you, please create an MHC Account access support ticket.
Before you Start:
- Make sure you have an active MHC Account and you know your MHC username and password.
- Have your phone and a computer ready. This process requires a web browser and a smart phone on separate devices, and you will switch between the two devices during set up.
- Get the Duo Mobile app on your phone
1. Create your MHC Duo account
- In a web browser on a computer, navigate to duo.mtholyoke.edu
- Choose Log in to set up or verify Duo
- Enter your MHC username and password on the blue and white MHC login screen
- Choose Next on the welcome message from Duo
- Choose Next again after reading the informational prompts
- When the "Select an option" screen appears, choose Duo Mobile*
*Depending on which device you're doing these steps on, you may see other Duo verification options suggested to you:
- LITS recommends using the Duo Mobile app option because it will allow you to log in to Duo-protected systems from any device as long as you have your phone with you.
- You may also configure biometric verification methods (ex. Touch ID, Windows Hello, etc) but those should NOT be your only verification method because they will only allow you to log into Duo-protected systems on the devices for which you set up the biometrics.
- Enter your mobile phone number
- Confirm that it has been entered correctly (or make corrections) when prompted
- Your browser will now ask you to download the Duo Mobile app, which you've already done!
- Choose Next in your web browser
- Your browser will now show a QR code
- The QR code you are shown is unique to you - Do not share it with others
- Leave this screen open and pick up your phone
2. Link your phone to your MHC Duo account for Duo Push
-
Open the Duo Mobile app on your phone
-
Choose Setup Account (Or, if you already use Duo for something else, choose Add )
-
Choose Use QR Code
-
Hold your phone up to the computer screen and scan the QR code displayed in your browser window
-
On the “Name Account” screen in the Duo Mobile app, keep all the default settings and choose Save
-
Next you may see a screen that says "Account Linked!" that will offer a practice activity, which you can do or skip
-
If asked, agree to allow push notifications
-
The next screen may show you a 6-digit passcode, which you can disregard because we don't have the Duo passcode verification method enabled for MHC Duo verification
3. Finish up by completing your first Duo verification
- Back in your browser on your computer, choose Continue
- You may be prompted to set up additional verification methods, which is encouraged
- If prompted, choose Log in with Duo
- Choose Duo Push to use the Duo Mobile app
- The Duo screen will show a 3-digit one-time verification code like the example below
- Then you'll get a push notification from the Duo Mobile app on your phone will ask you to enter the verification code displayed in your browser
- Type the code you are provided into Duo Mobile on your phone and choose Verify
|
|
- Once you have typed the code into your phone and received a verification message, there are no more steps to complete on your mobile device; You may close the app and set your phone aside
- Your browser may ask you if you would like Duo to remember this device
- If you are the only user of that computer, select “Yes, this is my device.”
- If the device is shared (for example, a computer used by everyone in your family, or a shared work computer in your department) select “No, other people use this device.”
- Finally, you will see a success message and will be redirected to the system you were logging into
Do NOT delete your MHC account in the Duo Mobile app or the Duo Mobile app itself as you'll need them to log into MHC services that are secured with Duo.
Need help?
Create an MHC Account access support ticket to get support from the LITS Technology Help Desk.