Note: If associating a token, verify the customer's identity information (ID number and date of birth) before proceeding. If a customer would like to disassociate a token, you do not need to confirm identity as this process does not give them access to any account information. 

Note: If it is a request to disassociate several tokens at once (most likely an IT manager or HR staff), or if you have any concerns at all about performing the association/disassociation requested, escalate the case to IAM.

1. Search for the user's NetID information in the NetID Utility. Scroll down to the NetID Information section.

   

2. Check to see if the token is registered to the user. Tokens will be listed by the MFA DUO Tokens section.

   

   Note: If associating a token, it must not currently be listed here. If disassociating, it must already be listed here.

3. Enter the token serial number into the field in the section MFA DUO Token Provisioning. Click the appropriate button to associate or disassociate the token.

   

   Note: If the device being registered is a USB Security Key, the serial number will need to be entered in the format NETID[serial number]. Otherwise, the serial number can just be entered in without the NETID prefix.

4. A message will be displayed with the status of the change. Refresh the NetID Utility Page to verify that the MFA DUO Tokens list has updated.