Duo Enrollment


[ Back to Duo ]

Are you already using Duo? If you have a new phone or factory reset your current phone, please use our self-service tool to quickly setup Duo again.

Otherwise, if you've never used Duo before, continue reading to learn how to get started.

Las instrucciones de inscripción de Duo también están disponibles en español.


I have a mobile device (smartphone or tablet) and I want to setup Duo for the first time

Step 1: Install Duo Mobile on your mobile device

From your mobile device, download the Duo Mobile app (there are versions for iOS and Android). Once the app is installed, set your mobile device aside and come back to these instructions. 

Step 2: Enroll your mobile device

From your computer, select the button below to open the Duo Support Desk in a new tab. If prompted, sign in with your UCInetID and password.

Duo Support Desk

 

Step 2a: After you've logged in to the Duo Support Desk, click the Start Setup button to begin the enrollment process.

Start Setup

Step 2b: Select the your device type, then select Continue.

Mobile phone > Continue

Step 2c: Enter your phone number, check the box to confirm you've entered the right number, and then select Continue.

Enter your phone and Continue

Step 2d: Select the type of device you are enrolling, then select Continue.

What type of phone > Continue

Step 2e: Select I have Duo Mobile installed.

Select I have Duo Mobile installed

Step 2f: Pick up your mobile device and open the Duo Mobile app.

Tap the “Add +” button on the top-right of the app to add your account.

Select the first option "Use QR code". If prompted, allow Duo Mobile access to your camera.

Hold your device up and point it at your computer screen with the QR code centered on the camera. Duo will automatically scan the QR code. After the green checkmark appears, select Continue.

NOTE: Do NOT scan the example QR code below.

Activate Duo Mobile > Continue

Step 2g: You’re almost done! The pulldown menu for “When I log in” gives you two options. Feel free to select either option. Then, select Continue to Login.

Continue to Logon

Step 2h: Your mobile device will receive a push.

 

Step 2i: Pick up your mobile device, and open the Duo Mobile app. Tap Approve to accept the Duo push request.

 

 


You're Done! Now generate your Emergency Backup Codes

On your computer, you will see that your enrollment was a success. You can exit this page and access UCI applications that require Duo MFA for logins. Duo is mandatory for future UCI login attempts.

After enrolling, you have the ability to generate Emergency Backup Codes. This is optional. Backup codes can be used just in case you lose or replace your phone.

Now that you are enrolled, learn more about how to use Duo.

 


I do not have a mobile device (smartphone or tablet). What can I use instead?

Step 1: Get a Hardware Token

If you don’t have a mobile device, the campus has funded independent Duo tokens for your use, free of charge.

Please email oit@uci.edu to request for a Duo hardware token. Please include your UCInetID in the email.

Alternatively, students and employees can purchase a third-party hardware token from vendors like Yubikey. If you have a Yubikey, enroll it now.

 

Step 2: Enroll your Hardware Token

From your computer, select the button below to open the Duo Support Desk in a new tab. If prompted, sign in with your UCInetID and password.

Once you're at the Duo Support Desk, you'll need to enter your hardware token's serial number, which can be found on the back of the token. Please note that some of the hardware token serial numbers will just be a string of numbers, and some will begin with the letters 'DSEC'. After you enter the number, select Register.

Step 3: Test your Token

Select the Test Token on the top-left of the page.

If prompted, you should login with your UCInetID and password. When you arrive at the Duo login page, type in the 6-digit code that appears on your hardware token's screen, and then select Verify.

NOTE: The hardware token has a button on it that displays the token code when it is pressed. If the button is pressed too many times without the token code being used to log in, the token will get out of sync and you won't be able to log in until it is resynced. Having the token in your pocket or backpack with keys or other objects that could press on the button will cause this to happen. Contact the OIT Help Desk to get the token resynced.

 


After you've enrolled

How to send a Duo push to your mobile device

Step 1: Log in to a SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password.


Step 2: The page will state the duo push has been sent to your phone.


 

Step 3: Open the Duo Mobile app and tap Approve. You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc).

 



 

How to enter a Duo passcode

Step 1: Log in to a SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password.


Step 2: On the Duo Login screen, select Other options and click on Duo Mobile Passcode if you want to use the code generates by the duo app. If you want to use your hardware token, select Hardware token.


Step 3: Generate your 6-digit passcode.

Mobile Device Users: Open the Duo Mobile app and tap the 'Duo-Protected University of California - Irvine' token to expand it and reveal a 6-digit code that you can use.

Duo Hardware Token Users: Press the button on the token to generate a 6-digit code.


Step 4: Type the 6-digit code and then select Verify. That's it! You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc).


 

Remember me for 24 hours

Step 1: Log in to a SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password. (Note: the trusted device prompt will reappear after the 24 session ends)


Step 2: Complete the duo login screen by approving the push or entering your passcode.

Step 3: The page will reload asking you if this is your device. Click on Yes, this is my device to have it remember your duo authentication for the next 24 hours and you're done!


 

Generate backup codes

You'll need these in case you misplace or replace your phone.

You've probably heard that you shouldn't write down your password, but these backup codes are an exception. You should definitely print these or write these down and keep them handy in a place where you can find them in an emergency, like your wallet, pocketbook, or purse. These are single-use codes, so after you use a code it cannot be used again.