Verifying the User is Eligible

First, look up the user in the NetID utility.

To check that a user is eligible for duo, check that Duo Eligible has a Yes next to it.

If the user is eligible for duo, confirm their date of birth. Then, use either one of the following methods:

• Duo on a Mobile Device
• Duo with a Token/Fob

If the user has not registered any MFA-Duo devices, you must instead verify Date of Birth and PhotoID.

Duo on a Mobile Device

If the user has a mobile device, click the option to Send Push.

This will send a push to the user's duo device for up to 60 seconds. When the user states they have approved the push, click on Check Push Status.

Note: If the authentication was successful, there will be a User has approved the Push message. Otherwise, you will be notified if the push has timed out or if it was declined. You may ONLY verify customer identity if the push has been approved.

Approved Push:

• If the user responds to the push, the message will appear saying User has approved the Push. In this case, the user has approved the push, and their identity is confirmed:

Push Timed Out:

• If the user does not respond to the push within 60 seconds, the message will appear saying User has not responded to the Push. In this case, try sending another push.

Denied Push:

• If the user declines the push, the message will appear saying User has denied the Push. In this case, try sending another push.

Note: If for some reason the user cannot receive push notifications, they can try generating a passcode on their device instead. To generate the code, they simply need to tap on the UW Madison NetID Login option. Then, proceed with verifying the code using the steps in the verifying the passcode section.

Duo with a Token/Fob

If the user has a token/fob, have the user generate a passcode with their device. Then, you'll need to verify the passcode.

Verifying the Passcode

In order to verify the passcode, enter in the code that the user generates into the Temporary passcode box.

Next, click the Validate Code button.

• If the passcode is invalid or expired, check to make sure that the passcode was correctly typed. Otherwise, have the customer try generating another passcode.

• If the code is a Valid passcode, the user's identity is confirmed.

If the user is not eligible for Duo, see UW-Madison Division of Extension NetID Recovery Process