Use Duo with your Virtual Private Network (VPN)

Before you Connect to VPN

  1. Ensure that you have Duo Security Two-Factor Authentication set up on your UMN account.
  2. Set your Default Duo Device

Connect to your VPN

  1. Launch the Cisco AnyConnect client -- the primary VPN tool supported by the University. 
  2. To ensure that you can access the appropriate VPN pool (full, split, or departmental), click the drop-down menu and select “UMN - Departmental Pools”.
  3. Click “Connect.”
    VPN drop down menu
  4. In the pop-up that appears, click on the “Group:” drop-down menu and select the appropriate VPN pool.
    AnyConnect interface with example VPN pool name
  5. Verify your identity with Duo. 

Verify your Identity with Duo

 Based on the way you use Duo, you’ll need to do one of the following:

Mobile Device, U2F, or Phone Users

If you use cell phone, tablet, U2F token or landline telephone to verify your identity with Duo

  • accept the “push notification” you get from Duo as you normally would.
  • Note: there will not be a prompt from Cisco to “accept the push” on the device you are using to sign in to the VPN. You will simply receive a Duo request on the device you have set up with Duo to receive “push notifications.”

Token or Passcode Users

If you use a hardware token or passcodes to verify your identity with Duo

  1. In the VPN log in window, in the Account Name field, enter your UMN user ID. 
  2. In the Password field, enter your UMN password, followed by a comma, then enter the passcode (do not enter any spaces).
    example of how to enter password,comma,passcode with no spaces in VPN sign in page

When to Use VPN

As a reminder, VPN should only be used when resources cannot be accessed by other means. A VPN is not needed for web-based UMN resources and services, such as MyU, University Gmail, Canvas, G Suite, and Office 365, and others.