Duo Security: Step-by-step Enrollment Guide

Introduction to Duo Security:

This video provides a 1 minute explanation of two-factor authentication: https://www.youtube.com/watch?v=_T_sJXnSM98

Getting Started:

This short video explains how to enroll your device with Duo Security to use it for two-factor authentication.  https://www.youtube.com/watch?v=HDU35vn0SS0

Here's a little video demonstrating what the experience is like once you've completed enrollment and 2FA is enabled: https://www.youtube.com/watch?v=tPLxe9HUDjY

If you received an enrollment invitation from "Duo Security" for two-factor authentication enrollment, you have 48 hours to get your first device enrolled.  If your invitation expires, please open a ticket to have a new enrollment link generated.  Duo supports multiple methods of authentication, including "Duo Push", SMS text code, voice call, or Touch ID (on MacBooks).

If you have a smartphone (iPhone or Android), we HIGHLY recommend selecting the "Duo Push" option, as this is by far the most convenient and portable option.  More info can be found here: https://duo.com/assets/pdf/Promoting_Push_Guide.pdf

Enrollment Procedure:

Here's a 2-min walkthrough video of the entire enrollment procedure:   (credit: Stony Brook University)

https://www.youtube.com/watch?v=z7bqP_VIdDs

Step-by-step instructions with screenshots:

1) On your smartphone, download the Duo Mobile app as you'll need it shortly.  Open the app store for your device and search for "Duo Mobile".  If you can't find it, you may also try using the direct links here:

iPhone: https://itunes.apple.com/us/app/duo-mobile/id422663827

Android: https://play.google.com/store/apps/details?id=com.duosecurity.duomobile

2) On your computer, open the enrollment link found in the invitation email. 
Look for the link below the text, "To begin, click this link..."   
This will bring up a webpage:

Click "Start setup."

Select "Mobile phone."

Enter your device's phone number and select Continue.

Select your device type and press Continue.

If you haven't already, install "Duo Mobile" app for your device type.  Then click "I have Duo Mobile installed."

The webpage will display a QR code like this:

3) Now grab you smartphone and launch the "Duo Mobile" app.  You'll see the "Welcome" page... click "Continue."

On the next page "Add your account", select the first activation option: "Use a QR code". 

You may be prompted by your device "Duo Mobile" would like to access the camera.  Select OK or YES.

Use the phone's camera to scan the QR code on your laptop enrollment page.  It should automatically read the QR code and advance to the next page.

"Name your account to continue" - press Next.  You can leave the default "Viewpoint School" or change it if you like.   Press Save.

You should now see "Account linked!"   That means your account is now connected with this device.  You can get a feel for the prompts will look like by clicking the "Practice now" button....  or you may skip it if you're familiar with Duo push prompts.

Next you will see a prompt if you wish to allow notifications.  We highly recommend that you ALLOW notifications.  This way the "push" will pop-up directly on your screen when it's needed.  (This is the only event that generates notifications from this app.). 

You may see a second prompt "Duo Mobile" would like to send you notifications:  again, pick ALLOW.

For the "improving your experience" question, you may set this to "Turn off."

Last page, "Almost there" - select OK.    Now you'll see the Duo app with your Viewpoint account listed.   The hidden passcode (6 dots) is ONLY required if you do not receive the Duo push or selected NO to notifications.

4) Return to your computer.  The QR code you previously used should have a green checkbox in the middle. 

Press the Continue button.

Next you will see the "Settings & Devices" page.  Here you have the option to ASK ME each time which method to use, or you can just automatically get a "Duo Push".  We recommend this 2nd option.

If the Push times out, or you do not have your device with you, you'll still have the option to pick another method.

Press Finish Enrollment button.

YOU'RE DONE!

Next Steps

Once you've completed the enrollment, we will be enabling this extra security measure on your account.  Here's a few things to remember:

- all devices that access your Viewpoint data (email, cloud files & apps, etc) will need to re-authenticate, including your work laptop.   The most common thing that breaks is your email account, which often exists a personal smartphone or iPad.  If you notice your mailbox stops syncing and you are not prompted to re-authenticate, you may need to delete the email account and re-add it on your device.  Reach out to the IT department if you need assistance or have questions with this.

- if the device is one you trust, select the option "Trust this device"; this way you will not be prompted again for 30 days on that device

Other information

If you would like more information about Duo or the enrollment process, please see the Duo guide for more information:

https://guide.duo.com/universal-prompt#enrollment

If you would like to add a SECOND method for authenticating, please see this article in our Help Center:

https://helpdesk.viewpoint.org/hc/en-us/articles/6354252651149-Duo-Security-Add-or-Manage-Devices-After-Enrollment