MFA-Duo - Logging in with Multi-factor Authentication

This document will provide instructions for logging in to a service that requires Duo Multi-factor Authentication.

In order to login with Duo Multi-factor Authentication, you must have first registered a device and linked it with your NetID. If you have not yet completed this, follow the instructions here: MFA-Duo - How to Enroll for MFA Duo for your NetID Login Account

  1. Navigate to the page that requires Duo Multi-factor Authentication after NetID login (for example MyUW).

  2. Authenticate with your NetID and Password.

  3. You will now be presented with the MFA-Duo screen.

    Duo authentication prompt with options to send push or enter a passcode

  4. Follow the instructions for your desired login method:

    5. Before following these steps, make sure you've already registered your smartphone or tablet. Steps to do so can be found here: MFA-Duo - First Time Setup for Smartphone or Tablet.

    1. When prompted for MFA-Duo, select Send Me a Push.

      2. Duo prompt indicating that there is an active push waiting for approval

  5. Tap the Duo Mobile notification you receive on your device.

    Duo notification on the home screen of a mobile device

  6. Tap APPROVE to approve the login request. After doing so, the notification on your device will go away, and you should be successfully logged into the service requiring Duo Multi-factor Authentication.

    Duo app with an active prompt open, with two options: approve or deny

    • Note: Tap DENY and then tap It seemed fraudulent if you ever receive a Duo Mobile push notification on your device that you aren't expecting.

    7. See accessibility & usability information

    We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

    For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

    How to get access to a Security Key or Duo Token/Fob 

    Students

    Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

    Faculty, Staff, and Researchers

    Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

    This feature is great for situations when your phone doesn't have a stable cellular data or wifi connection. This feature can even be used with your phone is in airplane mode or when you are traveling outside of the US.
    1. At the MFA Duo prompt, select Enter a Passcode.

      2. Duo authentication page with options to send push or enter passcode
       
    2. Open the Duo Mobile app on your device.
    3. Click the UW Madison item in your app.

      4. Duo Mobile app with entry for UW Madison NetID Login
    4. A 6-digit passcode will be presented. Enter that passcode in the MFA Duo prompt to complete the login process.

    • If the code doesn't work, click the refresh icon next to the code to generate a new code.
    • The code below is simply an example and not to be used to login.
      Expanded profile for the UW Madison NetID login entry with a six-digit passcode

    See accessibility & usability information

    We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

    For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

    How to get access to a Security Key or Duo Token/Fob 

    Students

    Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

    Faculty, Staff, and Researchers

    Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

    Before following these steps, make sure you've already registered your token to your account. More about that here: MFA-Duo - How to Enroll for MFA Duo for your NetID Login Account

    1. When prompted for MFA-Duo, you will be given the option to Enter a Passcode.

      • Note: if you have more than one device registered, make sure you select your token from the dropdown menu at the top of the MFA prompt.

    2. Make sure that the token's button is oriented to the left (as pictured). Press the button on the front of your MFA token.

      Duo TokenOTP c100 Token

    3. The token will display a 6-digit code.

    4. Enter that code in the prompt, then select Log In.

      Prompt for MFA authentication from a token

    See accessibility & usability information

    We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

    For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

    How to get access to a Security Key or Duo Token/Fob 

    Students

    Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

    Faculty, Staff, and Researchers

    Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

    Before following these steps, make sure you've already registered your USB device to your account. More about that here: MFA-Duo - How to Register a USB Security Key.

    1. When prompted for MFA-Duo, click Enter a Passcode.

      Duo prompt with an Enter Passcode button

    2. Verify that your USB device is plugged into a USB port on your computer.

    3. Making sure your cursor is in the passcode field, press the button on your Feitian USB device. The passcode field should automatically populate with a six-digit code.

      The text field is populated with a code when the USB key is used

    4. Click Log In.


    If you have any issues or questions, please contact the DoIT Help Desk.

    The security key allows MFA-Duo users to insert the security key into the USB port of their computer or laptop to authenticate. This security key requires a reachable USB port, but this security key also works with a laptop or desktop USB to USB-C adaptor. The key is not compatible with mobile devices and only works with laptop or desktop computers. 

    The security key experience is slightly different for the following modes of logging in: 

    See below for details on these modes. 

    Chrome web browser login 

    When logging in to a UW–Madison website or apps using Chrome (version 70 or later), insert the security key into your USB port, select Security Key (U2F) from the device dropdown menu, and lightly touch the impressed sensor button to initiate login. 

    Non-Chrome web browser or local software login

    When logging into a UW–Madison website or app in Firefox or Safari, insert the security key into your USB port. Select Token from the device dropdown menu, and click the "Enter passcode" button to make the passcode input field editable. Then lightly touch the impressed sensor button to insert the passcode in the input field. If you are using a screen reader or other assistive technology, the security key may enter the passcode so quickly you may not hear the full code. The audio cue may only include the last digit of the code. Click the login button to complete authentication, as the full code should have populated the field. 

    (See How to use a Feitian USB Security Key for more details and screenshots on the Chrome web browser login.)  

    How to get a security key

    Faculty and Staff New staff: Get a Feitian security key from your HR representative. Feitian security keys can also be picked up at the Walk-In Help Desk at 1210 W. Dayton Street Madison, WI 53706. Current staff can get a Feitian security key at the Walk-In Help Desk at 1210 W. Dayton Street Madison, WI 53706. 

    Students: Get a token or security key at no charge, at either the Walk-in Help Desk at 1210 W. Dayton St. or the pop-up Help Desks from early September through October 31, 2019. Locations and times for the pop-up Help Desks will be posted on the UW–Madison Events Calendar soon. After October 31, tokens or security keys can be picked up at the Walk-In Help Desk at 1210 W. Dayton St. For other assistance, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.  

      See accessibility & usability information

      We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

      For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

      How to get access to a Security Key or Duo Token/Fob 

      Students

      Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

      Faculty, Staff, and Researchers

      Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

      Security Key (U2F) authentication is only supported in the Google Chrome browser. We strongly recommend that you have a mobile device and/or token registered to MFA, and use U2F authentication as a secondary method.

      1. When an MFA prompt appears, be sure that the Security Key option is selected, and that your USB device is plugged into your computer.

        MFA prompt with no buttons available, waiting the USB Security Key button to be pressed.

      2. Tap the button on your U2F device and the authentication will take place automatically.


      If you run into any issues or have any questions, please contact the DoIT Help Desk.

      The security key allows MFA-Duo users to insert the security key into the USB port of their computer or laptop to authenticate. This security key requires a reachable USB port, but this security key also works with a laptop or desktop USB to USB-C adaptor. The key is not compatible with mobile devices and only works with laptop or desktop computers. 

      The security key experience is slightly different for the following modes of logging in: 

      See below for details on these modes. 

      Chrome web browser login 

      When logging in to a UW–Madison website or apps using Chrome (version 70 or later), insert the security key into your USB port, select Security Key (U2F) from the device dropdown menu, and lightly touch the impressed sensor button to initiate login. 

      Non-Chrome web browser or local software login

      When logging into a UW–Madison website or app in Firefox or Safari, insert the security key into your USB port. Select Token from the device dropdown menu, and click the "Enter passcode" button to make the passcode input field editable. Then lightly touch the impressed sensor button to insert the passcode in the input field. If you are using a screen reader or other assistive technology, the security key may enter the passcode so quickly you may not hear the full code. The audio cue may only include the last digit of the code. Click the login button to complete authentication, as the full code should have populated the field. 

      (See How to use a Feitian USB Security Key for more details and screenshots on the Chrome web browser login.)  

      How to get a security key

      Faculty and Staff New staff: Get a Feitian security key from your HR representative. Feitian security keys can also be picked up at the Walk-In Help Desk at 1210 W. Dayton Street Madison, WI 53706. Current staff can get a Feitian security key at the Walk-In Help Desk at 1210 W. Dayton Street Madison, WI 53706. 

      Students: Get a token or security key at no charge, at either the Walk-in Help Desk at 1210 W. Dayton St. or the pop-up Help Desks from early September through October 31, 2019. Locations and times for the pop-up Help Desks will be posted on the UW–Madison Events Calendar soon. After October 31, tokens or security keys can be picked up at the Walk-In Help Desk at 1210 W. Dayton St. For other assistance, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.  

        See accessibility & usability information

        We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

        For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

        How to get access to a Security Key or Duo Token/Fob 

        Students

        Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

        Faculty, Staff, and Researchers

        Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

      • You should be successfully logged into the service requiring Duo Multi-factor Authentication.

      See accessibility & usability information

      We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

      For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

      How to get access to a Security Key or Duo Token/Fob 

      Students

      Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

      Faculty, Staff, and Researchers

      Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

      See Also:



      Keywords:netid login app password get in login authenticate 2 two factor multi   Doc ID:81482
      Owner:Naomi S.Group:Identity and Access Management
      Created:2018-04-07 15:36 CDTUpdated:2020-04-09 08:57 CDT
      Sites:DoIT Help Desk, DoIT Tech Store, Identity and Access Management
      Feedback:  0   0