Body
Understand the available authentication methods for Duo MFA.
Overview
There are lots of different Duo verification methods available. LITS recommends that students, faculty, and staff have at least two methods set up in order to minimize the likelihood that you need to reach out for support when your devices change. Alums are only eligible for the SMS text message method.
This article explains the available Duo verification methods for students, faculty, and staff and for alums.
Students, faculty and staff
Verification methods
| VERIFICATION METHOD |
NOTES |
LITS SUPPORT |
Verified Duo Push
(using the Duo Mobile app) |
Recommended
- Requires an Android or iOS device compatible with the Duo Mobile app.
- Users can set up multiple devices with the Duo Mobile app (ex. a phone and a tablet).
- Can operate on WiFi / Does not require cellular data to function.
- Allows you to log into Duo-protected services on any device, so long as you have your phone/tablet with you.
If you haven't set up Duo yet, enroll in Duo and set up the Duo Mobile app for Verified Duo Push.
If you already have another method configured, you can manage your devices to set up the Duo Mobile app.
|
Full |
| Hardware Token passcode |
Alternate
- Available upon request to faculty and staff who aren't able to use the Duo Mobile app.
- Does not require WiFi or cellular data.
- Allows you to log into Duo-protected services on any device, so long as you have the hardware token with you.
|
Full |
| SMS text message passcode |
Alternate
- Available upon request to students who aren't able to use the Duo Mobile app.
- Requires cell signal and ability to receive SMS text messages.
- Allows you to log into Duo-protected services so long as you have your phone with you and can receive texts.
|
Full |
Platform authenticators
(ex. Touch ID, Windows Hello, Android Biometrics, iCloud Keychain) |
Extra / Convenience
- Availability depends on your device(s).
- Requires WiFi / internet connection.
- Allows you to log into Duo-protected services ONLY on the device(s) where they are already configured.
- Should NOT be your only configured verification methods as they do not allow you to complete Duo verification on other devices (like a classroom or lab computer).
Want to add a platform authenticator? Manage your Duo devices.
|
Best effort |
| Bypass Code |
Fail safe
Will be the only option if you have no configured verification methods, OR if your other verification methods are not available.
-
If you have other verification methods configured elsewhere, follow the manage devices instructions to add additional verification methods (like Verified Duo Push) so you can access Duo-protected services on that device.
-
If you don't have other verification methods, open an MHC Account access support ticket. Usually we'll work with users to get their verification methods updated to support future login success rather than providing a bypass code as a "band aid" solution.
|
Full |
| 6-digit Passcode (in the Duo Mobile app) |
Not available
While your Duo Mobile app will continually generate new 6-digit passcodes, MHC does not allow users to complete verification using that method. Simply ignore the passcodes generated in the app. |
N/A |
| Phone call |
Not available
This Duo verification method is not available at MHC. |
N/A |
Selecting a different Duo method than the one that is offered
If you've configured several verification methods for Duo (as is recommended for students, faculty, and staff), then you may find that you want to use a different one from what is offered to you by default in a given scenario.
The method you use most often on a given device or application will be the one that is offered by default. You can always decide to use another available verification method that you've configured.
When prompted for Duo verification, select Other options and then select the listed verification method of your choice.
Alums
Verification methods
| VERIFICATION METHOD |
NOTES |
LITS SUPPORT |
| SMS Text message passcode |
Required
|
Full |
| Bypass Code |
Fail safe
A bypass code will be the only alternative Duo offers if you don't have access to the phone number associated with your MHC Duo account. Open an MHC Account access support ticket or call the LITS Technology Help Desk at 413-538-2600 for support. Usually we'll work with alums to get their phone number updated in Duo to support future login success rather than providing a bypass code as a "band aid" solution. |
Full |
| Duo Mobile app (for Verified Duo Push or 6-digit passcodes) |
Not available |
N/A |
| Hardware Token passcode |
Not available |
N/A |
Platform authenticators
(ex. Touch ID, Windows Hello, Android Biometrics, iCloud Keychain) |
Not available |
N/A |
| Phone call |
Not available |
N/A |