This page is dedicated to information regarding DUO, troubleshooting, how-tos, and other helpful information.

Skip to Activating, Reactivating, and Troubleshooting DUO

What is Two-Factor Authentication (2fa)?

It’s called two-factor authentication because the user needs two factors to “authenticate” i.e. log in.  Your password is an “authentication factor” i.e. it is used to confirm your identity.  If I ask you to supply both a password and something else to prove your identity (the “second factor”), that’s two factor authentication.

Logging in to an ATM is 2fa: you must have the pin (the first factor) and you must have the ATM card (the second factor).  If you don’t have both, you don’t log in.

The most common second factor in use today is a user’s smartphone. Most 2fa methods allow you to text a code to your smartphone or install an app on your cellphone that prompts you to accept or deny a login.

What is DUO?

DUO is a 2fa software from a company called Cisco.

 

Do we have to use DUO?

Yes. In November of 2018, ITS began a phased rollout of two-factor authentication (2fa) to all TAMUSA employees and students. The System has made it a policy that all A&M institutions must implement 2fa. (TAMUS Regulation 29.01.03, Section 5.1)

 

Devices that can be used as DUO devices are:
- Any device that runs Android or iOS: iPhones, Android phones/tablets, iPads.

- Any device that can receive a phone call: not-so-smart cellphones, landline/desk phones

- A select number of hardware/security tokens.

- Passcodes

 

Troubleshooting & How-To

Click here if you have a new phone but have the same number.

If you change your phone but still have the same number, you can still authenticate via phone call, passcodes, or USB token. HOWEVER, Duo Push authentications to the Duo Mobile app will not work until you do the following:

1. Download and install the Duo Mobile app on your new smartphone.
2. Go to duoportal.tamusa.edu and log in with your Jaguar username and password. 
3. When the Duo prompt appears, choose "Call Me."  Duo will call your phone.  Follow the instructions.
4. Once you are on the screen called "My Settings and Devices," click on "Add another device" 
5. At the next screen, choose "Mobile Phone" and click Continue
6. At the next screen, enter your mobile number. Check the box and click Continue
7. At the next screen, choose the phone type (Android, iOS, etc.)
8. At the next screen, click "I have Duo Mobile installed"
9. At the next screen, launch the Duo Mobile app on your phone, click the "+" in the Duo Mobile app, and hold it up to the barcode on the screen.
10. Your new phone is now enrolled in Duo!

Click here if you have a new number but have the same phone.

If you changed your number but still have the same phone, you can still authenticate via Duo Push, passcodes, and USB token.  HOWEVER, "Call Me" and SMS texting of new passcode batches will not work until you do the following:

1. Go to duoportal.tamusa.edu and log in with your Jaguar username and password.
2. When the Duo prompt appears, authenticate with either a Duo Push, a passcode, or a USB token. If you have none of these, then you will need to contact ITS Helpdesk at (210)784-4357.
3. Otherwise, once you are on the screen called "My Settings and Devices," click on "Add another device" 
4. 
5. At the next screen, choose "Mobile Phone" and click Continue
6. At the next screen, enter your mobile number and click Continue
7. At the next screen, choose the phone type (Android, iOS, etc.)
8. At the next screen, click "I have Duo Mobile installed"
9. At the next screen, launch the Duo Mobile app on your phone, click the "+" in the Duo Mobile app, and hold it up to the barcode on the screen.
10. Your new phone is now enrolled in Duo!
11. Go back to the "My Settings and Devices" screen, click on the "Device Options" button next to the old phone number, and delete.

Click here if you have a new phone and changed your number.

If you have a new phone and phone number, then you will need to contact the ITS Helpdesk at (210)784-4357.

Click here to learn how to use a USB Security Token

Before you can use your new USB token, you need to register it in Duo. 

1. Plug the token into a USB port on your computer. 
2. Launch Chrome on that computer.  (Yes, it has to be Chrome if you want to register a U2F token). 
3. Go to duoportal.tamusa.edu, login with your Jaguar username and password, and Duo-authenticate.  You should get a screen like this: 
4. Click on the “Add another device” link.  You should get a screen like this: 
5. Choose “Security Key” and click “Continue.”  You should get this: 
6. Click “Continue” 
7. You will then finish enrolling the token by following the prompts it gives you. A little light on your token should start flashing.  On the HyperFIDO mini, push the little button on the token’s end.  On the Feitian/Yubico, press your finger against the metal flashing plate. 
8. Your USB token has been registered with Duo.  Now, when you get the Duo challenge screen, you will see an option to log in with your security key. 

Click here if you need to add additional devices.

Acceptable DUO devices

If you need to add an additional device (iPad, tablet, phone, or security token), please do the following:

1. Go to duoportal.tamusa.edu
2. Log in with your Jaguar username and password.
3. Select Add another device 
4. Select the device you are adding (For example: iPad, tablet, phone, or security token)
5. Follow the specified prompts for the device.
6. After the device has been added, you can select which device will be your default device with the drop-down menu
7. Click Save
8. Your new device is now enrolled in Duo!

Download DUO Mobile

1. Open Play Store / App Store
2. Search Duo Mobile   
3. Select Download / Install

 

Other Helpful Guides

Read our DUO Confluence to learn more about how to use DUO. 

DUO Self-Service Flyer