Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Universal Prompt will provide a simplified Duo 2-factor authentication experience helping you log in to your applications faster than before. The Duo login options will look different but will still support a wide range of login options.

Logging in with Verified Duo Push in the universal prompt.

     New Universal PromptImage RemovedImage Added

Enter Code on Your Device to Verify

An example of authentication using the universal prompt.


More About Duo Universal Prompt Login Options

Duo authentication methods listed from most to least secure
Use the drop down items below to learn more

Expand
titleFingerprint or Touch ID

Fingerprint Sensor

Fingerprint authentication lets you use your device's fingerprint sensor for Duo login verification. Duo supports fingerprint verification with Touch ID on Apple MacBooks and Mac Magic Keyboards.

Touch ID

In order to use Touch ID with Duo, make sure you have the following:

  • A MacBook Pro, MacBook Air or Magic Keyboard with a Touch ID button.
  • A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
  • Chrome 70 or later. While Duo passwordless supports Touch ID in Safari, use of Touch ID for two-factor authentication in Safari and additional browsers on macOS is not available at this time.

Touch your Mac's Touch ID sensor when prompted to log in to the application. If you aren't able to access the Touch ID sensor (such as when you close and dock your laptop), then you can choose to type in your Mac login password instead to verify.

Using TouchID to authenticate.

If you need to cancel a Touch ID authentication in progress, click or tap the cancel option shown by your browser, outside of the Duo Universal Prompt.


Expand
titleVerified Duo Mobile Push

Verified Duo Push

Pushes a login request to your iOS or Android phone or tablet if you have Duo Mobile installed and activated. Review the request on your phone or tablet, where you will receive a verification code. Enter the code and tap Verify to log in to the application from your mobile device. This is one of the easiest, fastest and most secure ways to verify Duo.

Using Duo Mobile Verified Push to authenticate.

Note: If you did not prompt for a Duo push, click "I'm not logging in" to report this attempt to our Office of Information Security.


Expand
titleHardware Token Passcodes

Log in using a passcode generated by a hardware token provided to you by your organization. Enter that passcode into the space provided and click or tap Verify to log in to the application.

Using a hardware token to authenticate.


Expand
titleText Msg Passcodes

SMS or Text message passcodes 

Log in using a passcode received from Duo in a text message. When you land on the text message page, it will show that a text message was just sent to you with a passcode. When you receive the message, enter that passcode into the space provided and click or tap Verify to log in to the application.

If you did not receive the text message from Duo, use the Send a new passcode link to try sending it again.

Passcodes received in a text message expire when used.

Authentication using a code sent via text message.


Expand
titlePhone Call Approval

Phone Call

Authenticate via phone callback. Answer the phone call from Duo and follow the voice instructions to log in to the application.

Authenticating via a phone call from Duo Mobile.


Log In With the Duo Universal Prompt

After completing Duo enrollment, you'll see the Duo prompt the next time you perform a browser-based login to a web service or a campus application protected with Duo.

The first time you log in to an application with Duo using the Universal Prompt, Duo chooses one of your configured login options automatically, selecting the most-secure method from the ones you have available.

What the options menu looks like:

Choosing an authentication method and logging in with Duo Universal Prompt.

If you don't want to use the method Duo automatically suggests for that application, cancel the Duo authentication in progress and click or tap Other options. Then, select the method you want from the list.

Future Universal Prompt logins to that application from the same device and browser will automatically use that same method. If you cancel the authentication in process and choose a different device, then the device you use becomes the first choice for that application.

Since Duo remembers the last-used authentication device for each application you access, the Universal Prompt should always display the previously used option for that application as the default.

What receiving a Universal Prompt from Duo looks like.

Remember my device

If you are logging into your device, you can click the option Yes, this is my device, to reduce number of time you must authenticate on your device. If you are using a public device or at device that is not yours, click No, other people use this device.

Choosing to reduce the number of times you are asked to authenticate on an owned device.

Successful login to your browser!

Confirmation of successful browser log in.

Content by Label
showLabelsfalse
max50
showSpacefalse
sorttitle
excludeCurrenttrue
cqllabel in ("duo","duo-2-factor-authentication","duo2factorauthentication","2fa") and space = "ATKB"

Search Knowledge Base

Submit a Service Request