Universal Prompt will provide a simplified Duo 2-factor authentification experience helping you log in to your applications faster than before. The Duo login options will look different but will still support a wide range of login options.
A Visual User Change
Here's a visual comparison of logging in with Duo Push in the new universal prompt vs. the previously traditional prompt:
New Universal Prompt
Previous Traditional Prompt
More About Duo Universal Prompt Login Options
Duo authentication methods listed from most to least secure
Use the drop down items below to learn more
Fingerprint Sensor
Fingerprint authentication lets you use your device's fingerprint sensor for Duo login verification. Duo supports fingerprint verification with Touch ID on Apple MacBooks and Mac Magic Keyboards.
Touch ID
In order to use Touch ID with Duo, make sure you have the following:
- A MacBook Pro, MacBook Air or Magic Keyboard with a Touch ID button.
- A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
- Chrome 70 or later. While Duo passwordless supports Touch ID in Safari, use of Touch ID for two-factor authentication in Safari and additional browsers on macOS is not available at this time.
Touch your Mac's Touch ID sensor when prompted to log in to the application. If you aren't able to access the Touch ID sensor (such as when you close and dock your laptop), then you can choose to type in your Mac login password instead to verify.
If you need to cancel a Touch ID authentication in progress, click or tap the cancel option shown by your browser, outside of the Duo Universal Prompt.
Log in using a passcode generated by the Duo Mobile app installed and activated on your Android or iOS device. Open Duo Mobile and locate your organization's account in the accounts list, and tap Show to generate a six-digit passcode. Enter that passcode into the space provided and click or tap Verify to log in to the application.
Log in using a passcode generated by a hardware token provided to you by your organization. Enter that passcode into the space provided and click or tap Verify to log in to the application.
SMS or Text message passcodes
Log in using a passcode received from Duo in a text message. When you land on the text message page, it will show that a text message was just sent to you with a passcode. When you receive the message, enter that passcode into the space provided and click or tap Verify to log in to the application.
If you did not receive the text message from Duo, use the Send a new passcode link to try sending it again.
Passcodes received in a text message expire when used.
Phone Call
Authenticate via phone callback. Answer the phone call from Duo and follow the voice instructions to log in to the application.
Log In With the Duo Universal Prompt
After completing Duo enrollment, you'll see the Duo prompt the next time you perform a browser-based login to a web service or a campus application protected with Duo.
The first time you log in to an application with Duo using the Universal Prompt, Duo chooses one of your configured login options automatically, selecting the most-secure method from the ones you have available.
What the options menu looks like:
If you don't want to use the method Duo automatically suggests for that application, cancel the Duo authentication in progress and click or tap Other options. Then, select the method you want from the list.
Future Universal Prompt logins to that application from the same device and browser will automatically use that same method. If you cancel the authentication in process and choose a different device, then the device you use becomes the first choice for that application.
Since Duo remembers the last-used authentication device for each application you access, the Universal Prompt should always display the right default option for that application.
