Using Duo Authentication to Access Campus Resources

This article covers how faculty, staff, and emeriti can authenticate with Duo two-factor authentication when prompted by the campus portal and other campus applications and resources that require Duo 2FA.

Remember that you will be prompted to authenticate with Duo when accessing the campus portal or other campus resources for each web browser on each device. For example, if you are on a laptop and access the portal with Mozilla Firefox and then access the portal with Google Chrome, you will have to authenticate with Duo for each login.

1. After entering your campus username or email address and password, you will be taken to a Duo authentication prompt and you will be prompted to authenticate with your default authentication method/device. You can either authenticate with that method/device or click Other options to choose another method/device.

Duo authentication prompt

Duo authentication methods from most to least secure:

  1. Verified Duo Push
  2. Duo Mobile push approval
  3. Duo Mobile generated passcodes
  4. Hardware token passcodes
  5. SMS passcodes
  6. Phone call approval
  1. Your default device is the device that allows for the most secure authentication method and was the first added (e.g., if you have two mobile phones that have the Duo Mobile app installed, Duo will choose the first mobile phone you added as your default device).
  2. Or click Other options to select another way to authenticate with Duo.

How do you want to authenticate?

I want to get a push notification from the Duo Mobile app

You must have the Duo Mobile app already set up with your Duo account. View instructions on setting up Duo Mobile.

1. Depending on your Duo settings, you may get a Duo Push automatically sent to your default device. If not, click Other options to choose where you want to get the Duo Push.

check for push
  1. Duo automatically sends an authentication request to your default device.
  2. Click Other options to select another way to authenticate with Duo.
1.1. If you choose Other options, click on the Duo Push option for the device you want to use.
other options to log in

2. Tap on the push notification on your device.

Missed the push notification? Just open the Duo Mobile app and select the login request.

iPhone push notification

3. Tap the Approve button to authenticate.

approve login request

4. Save your authentication for 14 days by choosing Yes, this is my device.

is this your device message

5. You're done! Your login should complete automatically.

I want to enter a passcode from the Duo Mobile app

You must have the Duo Mobile app already set up with your Duo account. View instructions on setting up Duo Mobile.

1. Click Other options.

check for push

2. Select Duo Mobile passcode.

other options to log in

3. Open the Duo Mobile app. Tap Show to show the passcode for the CSU Fullerton account.

If you have multiple accounts in Duo, you may have to tap on the CSU Fullerton account to show the Passcode option.

You can use any of your mobile devices that have the Duo app installed to generate the passcode.

Duo mobile app

4. You should now see a Passcode.

Having trouble with the passcode? Tap Refresh Passcode to generate a new passcode.

Duo passcode

5. Go back to the login screen and enter the passcode from the Duo Mobile app. Then click Verify.

enter your passcode
  1. Enter the passcode from the Duo Mobile app.
  2. Then click Verify.

6. Save your authentication for 14 days by choosing Yes, this is my device.

is this your device message

7. You're done! Your login should complete automatically.

I have a hardware token/fob that was issued by the IT Help Desk

Hardware tokens must be issued by the IT Help Desk so they are set up to work with the CSUF Duo system. Need to request a Duo token/fob? Contact the IT Help Desk at [email protected] or 657-278-7777.

1. Click Other options.

check for push

2. Select Hardware token.

other options

3. Press the button on your token to generate a passcode.

hardware token with passcode showing

4. Go back to the login screen and enter the passcode from your hardware token. Then click Verify.

Notice you do not need to include any spaces between the numbers.

enter token passcode and log in
  1. Enter the passcode from your hardware token.
  2. Then click Verify.

5. Save your authentication for 14 days by choosing Yes, this is my device.

is this your device message

6. You're done! Your login should complete automatically.

I want to enter a text message passcode from Duo

1. Click Other options.

check for push

2. Select the Text message passcode option for the device you want to use.

Have your own campus Zoom Phone extension? You can send a text message passcode to your campus extension and retrieve it in the Zoom app!

other options to log in

3. Retrieve the passcode from the text message sent by Duo.

Note that the passcode will expire in 10 minutes.

text message with passcode

4. Go back to the login screen and enter the passcode you received via text. Then click Verify.

enter text passcode
  1. Enter the passcode from the text message.
  2. Then click Verify.

5. Save your authentication for 14 days by choosing Yes, this is my device.

is this your device message

6. You're done! Your login should complete automatically.

I want to get a phone call from Duo

1. Click Other options.

check for push

2. Select the Phone call option for the device you want to use.

Remember if you have a Zoom Phone extension, you can choose to get a phone call for that extension and answer it on the Zoom app or your desk phone.

choose call me option

3. You will receive a phone call with instructions on how to authenticate. Usually this involves pressing a number on your phone's dial pad (e.g., press 1 to authenticate).

You should see a phone number displayed when Duo calls you, but it will likely be a phone number you do not recognize. Be sure to answer it!

answer the phone call

4. Save your authentication for 14 days by choosing Yes, this is my device.

is this your device message

5. You're done! Your login should complete on the web browser automatically.

Need More Help?

Contact the IT Help Desk at [email protected] or 657-278-7777.