CAE Duo - First time setup

How to activate Duo on your CAE account and set up a device to authenticate using it.

CAE Duo- Setup


This document will walk you through the process of setting up Duo Multi-factor Authentication for College of Engineering using your Computer Aided Engineering  (CAE) account. Please note that this is in addition to your NETID specific Duo instance. You will likely have two Duo instances under the same application/ Token/Fob once you have completed these steps. Once you are enrolled in the College of Engineering's Duo, you will be able to authenticate with Duo on both UW Madison and Engineering services. If you are unsure of your CAE specific username and password you can use the self service portal here for more information, or to reset your CAE accountCAE Account Portal

For an overview of CAE DUO, click here: https://kb.wisc.edu/cae/110616

You can find a list of current and future service in which you will need to utilize CAE Duo here: Services that require Duo

More on the Duo Multi-factor Authentication Project can be found on here:  MFA-Duo - What is Duo Multi-factor Authentication?.

Please plan for 10-15 mins to complete this process.

Items needed for Setup:

  1. Either a hardware token/fob or a Smartphone or tablet running supported platform.
    • Supported iOS versions
    • Supported Android versions
    • Supported Windows Phone versions
  2. Separate device with a web browser that IS NOT the smartphone or tablet you are registering. You must scan a QR Code during setup if you are using the smart phone or tablet app.
  3. Duo Mobile App, if you are going to use the your phone/table. You will be prompted to download this free application during the setup process.

Activation process:

1. Navigate to https://mfa.cae.wisc.edu

2. Log in with your CAE account credentials

3. You will need to activate DUO Multi-Factor Authentication for your account. Click on "Enable Engineering DUO for your CAE account"

    Enable Duo

4. You will now be taken to a page to enable Engineering DUO. Click Enable

Once you have Duo enabled on your account, you will need to set up a device for Duo verification.  You have the option of using a Mobile device with the Duo app and/or a hardware token/fob. You are able to use both the mobile app and a token/fob if you wish. 

Background:

The College of Engineering has decided to integrate Duo into critical CAE infrastructure services to adhere to campus policies. In order to utilize Multi-factor authentication, you will need to set it up on a smartphone, tablet or token. More on the Duo Multi-factor Authentication Project can be found on here:  MFA-Duo - What is Duo Multi-factor Authentication?

Please be sure you have activated Duo on your CAE account before setting up the Duo App. If you haven't, please see this page: CAE Duo - First time setup

CAE Duo- Duo App for Smartphone or Tablet

This document will walk you through the process of setting up Duo Multi-factor Authentication for College of Engineering specific services for use with a smartphone or tablet. Please note that this is in addition to your NetID specific Duo installation. You will have two Duo instances under the same application once you have completed these steps. Please plan for 10-15 mins to get your Duo registered with the College of Engineering.

Note: This document is only for setup if you're planning to use a smartphone or tablet with MFA Duo.

If you wish to use a hardware token only, please see the instructions here. 

As mentioned in the Initial Setup directions, please be sure to use a separate device from your phone or tablet to access the MFA portal, as setting up the app will require scanning a QR code from your device

1. Once you have activated Duo on your CAE account, navigate to mfa.cae.wisc.edu, where you should see the CAE Duo Portal, shown below.  To begin setting up the Duo App, click "Start Setup"


start

     2. Select the device type you would like to add:

Smart Phone

Select Mobile Phone then press Continue.

phone0

Enter your phone number. press Continue.

phone1

Select the type of phone that the number is associated with and press Continue.


da0


If you are setting up Duo for the first time you must download the Duo Mobile Application for your device. If you are adding it you can skip to the next step.
  • iOS/iPhone: Download the Duo Mobile App from the App Store.

  • Android: Download the Duo Mobile App from the Google Play Store.

  • Windows Phone: Download the Duo Mobile App from the Microsoft Store.

Configure the Duo App on your mobile device and finish adding the device in MFA Portal:
  • Open the Duo App on your phone.

Note: After opening the Duo App, you may be asked to accept notification and camera privileges. Click Allow if prompted.

  • In the MFA Portal, click I have Duo Mobile installed.

mi1
  • In the Duo App on your device, tap the plus sign button in the top right.

da1

Using your device, scan the QR code on the screen in the MFA Portal and click Continue.

The following video from Duo demonstrates how to scan the QR code: Duo Self Enrollment

  • ss
s1
You will see the following screen in your browser if your first device registration is successful, and your mobile phone should return to the Duo home screen. You have completed registration.
 

Tablet

Select Tablet then press Continue.

phone0

Select iOS or Android (depending on your device) then press Continue.

Tablet OS


If you are setting up Duo for the first time you must download the Duo Mobile Application for your device. If you are adding it you can skip to the next step.

  • iOS/iPhone: Download the Duo Mobile App from the App Store.

  • Android: Download the Duo Mobile App from the Google Play Store.

  • Windows Phone: Download the Duo Mobile App from the Microsoft Store.

Configure the Duo App on your tablet and finish adding the device in MFA Portal:

  • Open the Duo App on your tablet.

Note: After opening the Duo App, you may be asked to accept notification and camera privileges. Click Allow if prompted.

  • In the MFA Portal, click I have Duo Mobile installed.

mi1

  • In the Duo App on your device, tap the plus sign button in the top right.


da1

Using your device, scan the QR code on the screen in the MFA Portal and click Continue.

The following video from Duo demonstrates how to scan the QR code: Duo Self Enrollment

  • ss

s1
You will see the following screen in your browser if your first device registration is successful, and your mobile phone should return to the Duo home screen. You have completed registration.

 
Background:

The College of Engineering has decided to integrate Duo into critical CAE infrastructure services to adhere to campus policies. In order to utilize Multi-factor authentication, you will need to set it up on a smartphone, tablet or token. More on the Duo Multi-factor Authentication Project can be found on here:  MFA-Duo - What is Duo Multi-factor Authentication?.

Note: You'll need to have activated Duo on your CAE account to set up a token.  If you haven't, please see this page: CAE Duo - First time setup

CAE Duo - Setup for Token/Fob

This document will walk you through the process of setting up Duo Multi-factor Authentication for College of Engineering specific services using a hardware token/fob. Please note that this is in addition to your NetID specific Duo installation. You may have two Duo instances using the same Token/Fob once you have completed these steps. Please plan for 10-15 mins to get your Duo registered with the College of Engineering.

Note: This document is only for setup if you're planning to use a hardware token/fob. 

If you wish to use a smartphone or tablet with MFA Duo, please see the instructions here


1. Once you've activated Duo on your account, navigate to mfa.cae.wisc.edu and click "Manage Tokens and One-Time Codes"

Manage Tokens

2. Click on "Add new token"

Add Token

3. Enter the serial number on the back of your token, then press the button on the front of the token and enter the code it generates in the corresponding field.

Add Token 2

Note:  If you already have Duo activated and have another device set up for Duo authentication, you will need to use it to authenticate when you add the token.
Add token as secondary device

4. Press the Add button. You should now see that serial number listed under your active tokens.

Token added

If you are using the same token for your CAE account and your NetID, it is possible the token will get out of sync with one service or the other if you use it for one service significantly more than the other.  If your token becomes out of sync for either the CAE Duo or NetID Duo instance, you can find more information on re-syncing your token at the following pages: