MFA-Duo - Logging in with Multi-factor Authentication

This document will provide instructions for logging in to a service that requires Duo Multi-factor Authentication.

In order to login with Duo Multi-factor Authentication, you must have first registered a device and linked it with your NetID. If you have not yet completed this, follow the instructions here: MFA-Duo - How to Enroll for MFA Duo for your NetID Login Account

    1. Navigate to the page that requires Duo Multi-factor Authentication after NetID login (for example MyUW).

    2. Authenticate with your NetID and Password.

    3. You will now be presented with the MFA-Duo screen which, by default, will send your device a push.

      verified push prompt

    4. Follow the instructions for your desired login method:

      Send Me a Push

      Before following these steps, make sure you've already registered your smartphone or tablet. Steps to do so can be found here: MFA-Duo - First Time Setup for Smartphone or Tablet.

      1. When prompted for MFA-Duo your device will be sent a push by default.

        verified push

      2. Tap the Duo Mobile notification you receive on your device.

        push notification

      3. Enter the code from the Verified Push prompt into your mobile app to approve the login request. After doing so, the notification on your device will go away, and you should be successfully logged into the service requiring Duo Multi-factor Authentication.

        verified push - mobile

        Note: Tap I'm not logging in if you ever receive a Duo Mobile push notification on your device that you aren't expecting.

      See accessibility & usability information

      We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

      For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

      How to get access to a Security Key or Duo Token/Fob 

      Students

      Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

      Faculty, Staff, and Researchers

      Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

      Enter a Passcode using the Duo App on your smartphone/tablet

      This feature is great for situations when your phone doesn't have a stable cellular data or wifi connection. This feature can even be used with your phone is in airplane mode or when you are traveling outside of the US.
        1. At the MFA Duo prompt, if it is automatically sending you a push, select Other options.

          verified push - other options

        2. Select Duo Mobile passcode from the list.

          duo mobile passcode

        3. Open the Duo Mobile app on your device and click Show under your UW Madison NetID Login account.

          show passcode

        4. A 6-digit passcode will be presented.

          passcode

        5. Enter the passcode generated from the app in the MFA Duo prompt and click Verify to complete the process.

          enter your passcode

          Note: If the code doesn't work, click the Refresh Passcode button to generate a new code.

      I’m seeing the below screen in Duo Mobile - what does this mean?

      update recommended screenshot

      Screenshot text: “Update Recommended: Your administrator recommends updating to the latest version of Duo Mobile due to security concerns.”
       
      You are seeing this message because this means you should update your version of Duo Mobile to the latest version. To confirm you’re running the latest version of Duo Mobile, please visit Supported iOS versions or Supported Android versions. If your device's OS does not support this, please explore MFA-Duo - Device Options.

      See accessibility & usability information

      We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

      For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

      How to get access to a Security Key or Duo Token/Fob 

      Students

      Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

      Faculty, Staff, and Researchers

      Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

      Enter a Passcode using a token/fob

      Before following these steps, make sure you've already registered your token to your account. More about that here: MFA-Duo - How to Enroll for MFA Duo for your NetID Login Account

      1. When prompted for MFA-Duo, you will be given the option to enter a passcode from a Hardware token.

      2. Make sure that the token's button is oriented to the left (as pictured). Press the button on the front of your MFA token.

        Duo TokenOTP c100 Token

      3. The token will display a 6-digit code.

      4. At the Duo MFA prompt, if it is automatically sending you a push, select Other options.

        other options

      5. Select Hardware token from the list.

        hardware token

      6. Enter the code from the token in the prompt and select Verify.

        enter passcode

      See accessibility & usability information

      We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

      For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

      How to get access to a Security Key or Duo Token/Fob 

      Students

      Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

      Faculty, Staff, and Researchers

      Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

      Enter a Passcode using a USB Security Key

      Before following these steps, make sure you've already registered your USB device to your account. More about that here: MFA-Duo - How to Register a USB Security Key.

      1. If you registered your USB device to function as both a Hardware token and a WebAuthn Authenticator in the instructions linked above, there are two options to login. Select Other options in the initial Duo prompt.

        other options

      2. Verify that your USB device is plugged into a USB port on your computer, then select which method you will like to use to authenticate:

      Hardware token

      1. Select Hardware token from the list of options.

        hardware token

      2. Making sure your cursor is in the passcode field, press the button on your USB device. The passcode field should automatically populate with a six-digit code. Click Verify to login.

        enter passcode

      WebAuthn Authenticator/Security Key

      1. Select Security key from the list of options.

        security key step 1

      2. Follow the prompts (which differ slightly between operating systems and browsers) to sign in with your USB device.

        use your security key

      If you have any issues or questions, please contact the DoIT Help Desk.

       

      See accessibility & usability information

      We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

      For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

      How to get access to a Security Key or Duo Token/Fob 

      Students

      Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

      Faculty, Staff, and Researchers

      Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

    5. You should be successfully logged into the service requiring Duo Multi-factor Authentication.

See accessibility & usability information

We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

How to get access to a Security Key or Duo Token/Fob 

Students

Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

Faculty, Staff, and Researchers

Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

See Also


Keywords:
netid login app password get in login authenticate 2 two factor multi
Doc ID:
81482
Owned by:
MST Support in Identity and Access Management
Created:
2018-04-07
Updated:
2025-06-02
Sites:
DoIT Help Desk, Identity and Access Management