Note: If you are registering a new primary device and no longer have access to your currently-registered device, see MFA Duo – Reactivate Duo on a Mobile Device.

Adding another device:

1. Navigate to the Multi-Factor Authentication Portal at www.mfa.wisc.edu. Authenticate with your UW-Madison NetID and Password. authentication devices.

2. Click Manage MFA Preferences and Devices.

   • Note: You will need to authenticate using an existing multi-factor authentication device.

3. Click Add a Device.

   

4. Follow the instructions specific to the device type you would like to add.

   Mobile Phone

   1. Select Duo Mobile.

      

   2. Enter your phone number and press Continue.

      

   3. Verify your phone number by clicking Yes, it's correct.

      

   4. Download the Duo Mobile Application on the new device you are adding, if not already downloaded and click Next:

      • iOS/iPhone: Download the Duo Mobile App from the App Store.

      • Android: Download the Duo Mobile App from the Google Play Store.

        

   5. Configure the Duo App on your mobile device and finish adding the device in Device Management Portal:

      1. Open the Duo App on your phone.

         Note: After opening the Duo App, you may be asked to accept notification and camera privileges. Click Allow if prompted.

      2. In the Duo App on your device, tap the Add + button in the top right corner and select the Use QR code option.

      3. Using your device, scan the QR code on the screen in the Device Management portal.

         

      4. If device is added successfully you will arrive at the following screen. Selecting Continue will complete the process.

         

   Tablet

   1. Select Duo Mobile.

      

   2. Select I have a tablet.

      

   3. Download the Duo Mobile Application for iOS or Android and click Next:

      • iOS: Download the Duo Mobile App from the App Store.

      • Android: Download the Duo Mobile App from the Google Play Store.

        

   4. Configure the Duo App on your tablet and finish adding the device in MFA Portal:

      1. Open the Duo App on your tablet.

         Note: After opening the Duo App, you may be asked to accept notification and camera privileges. Click Allow if prompted.

      2. In the Duo App on your tablet, tap the Add + button in the top right corner and select the Use QR code option.

      3. Using your device, scan the QR code on the screen in the Device Management portal.

         

      4. If device is added successfully you will arrive at the following screen. Selecting Continue will complete the process.

         

   Token/Fob

   Note: You will need to obtain a token before you can register it. For information on how to obtain a token, see MFA-Duo - What is a token/fob?. It is very important that you not press the token button repeatedly prior to registering your token. This may cause the token to become out of sync and you will not be able to register it.

   1. Go to https://go.wisc.edu/token.

   2. Log in with your NetID and password.

   • Note: If you've already registered a device and are using MFA Duo, you'll be prompted to login with your NetID twice, then be prompted for MFA Duo.

   • Select the type of token that you have.

     

   • Enter the Token Serial Number in the appropriate field. The Token Serial Number may be entered with spaces/dashes or with numbers only; the format does not matter.

   • Making sure that the token's button is oriented to the left, press the button on the front of the token and enter the 6-digit passcode.

   • Click Register Duo Token/Fob.

   • The token will now be registered with your account.

   • Please note, if the token is the first MFA device you have registered, you'll will start being prompted for MFA.

   Please note that one of the token images resembles a Yubikey token. While they may work, no support will be provided by the UW-Madison MFA project for Yubikey tokens.
   

   See accessibility & usability information

   We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

   For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.
   
   

   How to get access to a Security Key or Duo Token/Fob 

   Students

   Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

   Faculty, Staff, and Researchers

   Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

   Security Key 

    

   Note: You will need the serial number of the device to complete registration. The serial number can be read from the back of the device or from a sticker placed on the packaging.

   There are two stages of registering these devices. The first stage registers the device to be used as a hardware token and the second stage registers it to be used as a WebAuthn Authenticator.

   1. Navigate to go.wisc.edu/token.

   2. Login with your NetID and password.

      • Note: If you've already registered a device and are using MFA Duo, you'll be prompted to login with your NetID twice, then be prompted for MFA Duo.

   3. Select "USB Security Key" from the list of device types.

      

   4. You will be directed to Part 1 of the USB Security Key registration process.

      Follow the prompt to enter the USB Security Key Serial Number into the first input field. The serial number can be found on the back of your USB Security Key package.

      

   5. Plug the USB Security Key into a USB port or adapter.

   6. Click inside the second text field under Step 3: Get a passcode from the USB Security Key then press the button on your device. The six-digit passcode should be entered automatically.

   7. Click Next.

   8. Your device has now been successfully registered as a hardware token! 

   The second stage of the process registers your device as a WebAuthn Authenticator.

   

   1. Click the blue Duo Device Management Portal button. You will be asked to login with your NetID and password and authenticate with Duo once more.

   2. In the new tab that just opened, select the panel called Add a device.

      

   3. Select Security key from the 'Select an option' window.

      

   4. Click Continue to bring up a popup window for enrolling your security key. The key will need to be plugged into a USB port on your computer.

      

   5. Follow the prompts depending on your operating system and browser, then tap the button on your device to complete enrollment.

      

   6. You should now see both a Security key or Passkey in your Device Management Portal as well as a Hardware Token. These both represent your singular physical device registered as a Hardware token that can enter passcodes, as well as a WebAuthn Authenticator.

      

    

   See accessibility & usability information

   We work with our users to address access and usability barriers in the MFA user experience. Learn details about known access barriers and workarounds at MFA-Duo - Accessibility & Usability Information. If you encounter a barrier or need assistance, please contact the DoIT Help Desk or call (608) 264-4357.

   For questions regarding how to get access to the MFA mobile app contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.
   
   

   How to get access to a Security Key or Duo Token/Fob 

   Students

   Students, to obtain a token/fob, please contact the DoIT Help Desk (608) 264-4357 or email help@doit.wisc.edu. Students with disabilities can also request a token or security key at the McBurney Disability Resource Center, 702 W. Johnson St., Suite #2104, Madison WI 53715 on the 2nd floor.

   Faculty, Staff, and Researchers

   Employees can get access to devices for MFA at their Human Resources Office or IT department. For questions contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. 

    

    

5. At the portal screen, you should now see the device you have registered listed. The device has been registered successfully!

Note: If the device does not register or show up in the list of devices, try adding the device again. If it fails again, contact the DoIT Help Desk for assistance.