WebAuth + Duo Authentication

Employees now have the option to use Duo two-factor Authentication (2FA) as an added security measure to protect your account's access to any WebAuth-enabled service (such as Zotportal, EEE, or DEFT, for example). This service provides you with a secondary means of confirming your identity via your mobile device in addition to your existing password that makes it near impossible for your account to get compromised.

You must first Opt-In to begin requiring the use of Duo-2FA with WebAuth.

How do I get started using Duo with WebAuth?

Download the App and Enroll in Duo

  1. Download the Duo app for your iPhone or Android phone.
  2. Once it is installed, you can go to the Duo Enrollment page and follow the steps to set up your Software Token. For additional information please visit UCI Duo Support.

Opt-in to use Duo with WebAuth

Once a device is registered, you can visit the Duo Support Desk portal to Opt-In to the Duo + WebAuth. Here's how you do it.

  1. Log in to the Duo Support Desk.
  2. You'll be prompted to login with your UCInetID and password.
  3. Select the WebAuth Opt-In tab. You will be asked to authenticate using your Duo token (if you haven't already done so for the existing session).
  4. Your current opt-in status will then be displayed. You can change your current opt-in status by selecting Enable or Disable and selecting the Submit button.

Enrollment in DUO-2FA is optional. You may opt-out at any time by repeating the steps above.

How does Duo work with WebAuth?

2FA verification works by prompting you for two pieces of identification when you sign in: something you know (your password) and something you're physically holding (your phone).

Log in to a WebAuth-enabled service (such as Zotportal or EEE) as you normally would with your UCInetID and password. You will then be prompted for a secondary authentication approval from one of your enrolled devices. This will occur each time you log in.

  1. Enter your UCInetID and password.
  2. Receive a Push notification to your mobile device or Enter a Passcode
  3. Tap "Approve" on your mobile device to be logged in.

I've replaced my phone and now I can't sign in to WebAuth. Can you disable two-factor for me?

Yes, we can. Please open a ticket. When doing so, please provide the following:

  • Your full name
  • Your UCInetID (the first part of your email address, not your ID number)
  • Your mobile number
  • A detailed description of the issue

For security reasons, we have to speak with you to verify your identity.

How do I enable Auto-Push for Web Logins?

  1. Go to https://applications.oit.uci.edu/DuoSupportDesk/enrollmentDuo.htm
  2. Click on the "My Settings & Devices" link
  3. Use Duo authentication to confirm your device
  4. Change the "When I log in" selection for your device to automatically send a Duo push (or the opposite to disable)
  5. Click Save.

How do I enable the 'Remember Me for 24 hours' feature when Auto-Push is enabled for Web Logins?

  1. Click the "Cancel" button on the web page screen where it says "Pushed a login request to your device..."
  2. The "Remember me" checkbox should now be editable.
    • NOTE: Using this feature requires your browser to accept 3rd party cookies.
  3. Change option as desired and click Push, after which it will Auto-Push again with new setting.

I'm having trouble using Duo.

We have a comprehensive Duo Help Center page where you can troubleshoot your issue.

I've tried the steps above and I'm still having issues

We recommend you continue your search in our comprehensive ServiceNow Knowledge Base.

If you're still having trouble, feel free to open a ticket. When doing so, please provide the following:

  • Your full name
  • Your UCInetID (the first part of your email address, not your ID number)
  • Your mobile number
  • A detailed description of the issue

Failure to provide this information will delay our response.

Lots of great technical information can be found in the Duo User Guide.

Return to the OIT Help Center.

Scroll Up