There are many ways to verify your identity using Duo Security. Depending on the application you are accessing, Duo will send you either the universal prompt or the traditional prompt. Refer to the instructions that correspond with the prompt you receive:
Universal Prompt Traditional Prompt
Universal Prompt
The Duo universal prompt is the next-generation version of Duo's interactive web-based authentication interface. As of March 19, 2024, most web applications (e.g., Shibboleth, AD Azure) use the universal prompt. Learn more about universal prompt.
In this section:
- Using Duo Push to Authenticate
- Using a Backup Device or Other Method to Authenticate
- Using a Passcode to Authenticate
- Using Duo Remembered Devices
Using Duo Push to Authenticate
- Sign in using your UMN internet ID and password. In most cases, the authentication method will default to Duo Push, and a push notification will be sent to your device.
- Duo remembers the last authentication option you chose for an application, and it will default to that option unless you change it by selecting another from the Other options menu.
Refer to Log In With the Duo Universal Prompt for more information.
Using a Backup Device or Other Method to Authenticate
You may wish to use a log in method other than your primary device, or you may need to use a backup device to verify your identity.
- Duo remembers the last authentication option you chose for an application, and it will default to that option unless you change it by selecting another from the Other options menu.
- To manage your devices, select Other options, then Manage devices.
Using a Passcode to Authenticate
To authenticate using a passcode, the Duo Mobile app must be installed and activated on your Android or iOS device.
- Open the Duo Mobile app, locate University of Minnesota in the accounts list, and select it to generate a six-digit passcode.
- Sign in to the application you're accessing using your UMN internet ID and password.
- Enter the passcode in the space provided, and Verify to complete your authentication to the application.
- If your prompt does not ask for a passcode, select Other options, then Duo Mobile passcode.
- Duo universal prompt remembers the last authentication option you chose for an application, and it will default to that option unless you change it by selecting another from the Other options menu.
See Generating Passcodes for instructions.
Using Duo Remembered Devices
Duo's remembered devices feature saves time while keeping your information safe, similar to "remember my computer" or "keep me logged in" options on other websites. Only remember devices you own or are assigned to you.
- When signing in using your UMN internet ID and password, authenticate with Duo.
- When asked Is this your device? select Yes, this is my device to enable trusting the browser for 7 days (or until browser cookies are cleared).
- Only select Yes, this is my device if you are the only one using that device.
- Selecting No, other people use this device will not enable trusting the browser for 7 days, and the browser will not ask the question again for 14 days (or until browser cookies are cleared).
Note: If you do not receive the Is this your device? prompt, cancel authentication, clear your browser cookies, and retry authentication.
Traditional Prompt
In this section:
- Using Duo Push to Authenticate
- Using a Backup Device or Other Method to Authenticate
- Using a Passcode to Authenticate
- Using Duo Remember Me
- Setting a Default Device
Using Duo Push to Authenticate
- When signing in using your UMN internet ID and password, on the Duo authentication page, choose Send Me a Push.
- A push notification will be sent to your device.
- Follow the instructions to approve the push for your type of device:
Using a Backup Device or Other Method to Authenticate
- When signing in using your UMN internet ID and password, on the Duo authentication page, choose the desired device from the Device drop-down menu.
- Follow the prompts for the device you select.
Using a Passcode to Authenticate
- When signing in using your UMN internet ID and password, on the Duo authentication page choose Enter a Passcode.
- Enter your passcode and choose Log In.
- Or, hit Enter.
- Or, hit Enter.
See Generating Passcodes for instructions.
Using Duo Remember Me
After checking Remember me for 7 days, you will continue to sign in using your UMN internet ID and password. You only bypass the Duo authentication step for 7 days on the device and browser you used to check the box (or until browser cookies are cleared).
- Sign in to any University page that requires your UMN internet ID and password.
- Before choosing your authentication method, check Remember me for 7 days.
- If you have your account set up to automatically sign in, you will need to cancel the authentication attempt before you can use Remember me for 7 days.
- To stop using Remember me for 7 days, uncheck the box.
- Choose an authentication method to verify your identity.
Notes:
- Some browser versions and University websites/applications do not allow Remember me for 7 days.
- If your browser is set to clear cache and cookies upon close, the Remember me for 7 days option will not work. You can disable this in Chrome or Firefox. If your administrator does not allow you to disable clear cache and cookies upon close, you can choose to manually allow cookies for login.umn.edu.
Setting a Default Device
You can set up Duo to use a default authentication method and primary device.
- Sign into my-account.umn.edu with your UMN internet ID and password.
- Authenticate with Duo using your desired method.
- Expand Duo Security in the navigation menu on the left side of the page.
- Select Create or Manage Duo Account.
- You will need to authenticate using one of the options from step 2.
- Select your preferred and primary device in the Default Device drop-down menu.
- Select your default authentication method by choosing an option from the When I log in drop-down menu.
- Select your default authentication method by choosing an option from the When I log in drop-down menu.
Generating Passcodes
You may need to use a passcode if you forget or lose your device, had your device stolen, or are in an area without cell service or Wi-Fi. There are many ways to generate passcodes:
Generating Duo Mobile App Passcodes
You can use the Duo Mobile app to generate passcodes. Choose your device to learn more on Duo's website:
Generating Hardware Token Passcodes
Press the button on your hardware token to generate a new passcode.
If your token is not working, it may be out of sync. Your token may get out of sync because:
- the button was pressed repeatedly over a short period of time
- the token generated numbers that were not used
- the token was not used for over a month
- the battery is dying (token batteries generally last between 2-5 years)
- You may be able to re-sync the token by attempting to log in three times in a row, using a new code each time.
- If re-sync fails after the third attempt, see Returning a Hardware Token to acquire a new token.
Generating Bypass Codes
You can generate a number of single-use bypass codes for future use good for a period of 1 year (365 days) after they are generated.
- Sign into my-account.umn.edu with your UMN internet ID and password.
- Authenticate with Duo.
- Expand Duo Security in the navigation menu on the left side of the page.
- Select Generate Duo Bypass Codes.
- Select Submit.
You will receive a copy of your bypass codes in your email. You can use each code one time when logging into a Duo-protected University application. If you are running low on codes, follow the steps above to generate another set of codes.
Note: Generating new bypass codes voids any previously-generated bypass codes.
Generating a Technology Help Generated Bypass Code
If you have not enrolled a backup device and/or have not generated bypass codes in advance, you can also get a temporary single-use security code by calling Technology Help or visiting a walk-in location with a valid ID.