DUO FAQ and Device Installation

DUO FAQ
I have changed mobile phones since I first setup DUO and now I can't get a "Push Notification". What should I do?
Contact the Help Desk at 808-675-3211 or email help@byuh.edu to have your old device removed so that you can set up your new device.
I don't have a mobile phone or tablet how can I get past DUO?
Contact the Help Desk at 808-675-3211 or email help@byuh.edu to request a bypass code.  Bypass codes can be used only once and have to be used to log in within 60 minutes after created.  You can use the "Remember me for 365 days" setting so you don't have to keep getting bypass codes every time you log in.
I had a mobile phone while on campus but am back in my home country and the phone doesn't work.  How can I can I get past DUO?
If you have a mobile phone or tablet that has WiFi available you can set up DUO using the tablet option instead of the mobile phone option.  If you are using the same device you previously had DUO set up on contact the Help Desk at 808-675-3211 or email help@byuh.edu to remove your previous device then set up your device with the tablet option. If you don't have a mobile phone or tablet see instructions above.
I don't get the prompt to Start Setup what can I do?
Log out of your program and restart the browser.  Make sure all tabs and windows of your browser are closed before trying to open the browser back up. Log in again and you should get the prompt to start setup.
Why won't my browser "Remember me for 365 days"?
Third party cookies may be blocked in your browser.  Scroll to the bottom of this page to see how you can allow them in your specific browser.
How do I resolve Duo Prompt display issues related to iOS or macOS content restrictions? https://help.duo.com/s/article/3710?language=en_US
 
Directions to set up DUO:
 
To improve login security, BYUH systems now require Multi Factored Authentication (MFA). All current employees including student employees will be required to use MFA when logging into web resources. If you require assistance, please contact the university helpdesk at (808) 808-675-3211.

1. Welcome Screen
On a desktop, laptop or tablet log into Workday to get the Welcome Screen and click "Start setup" to begin enrolling your device.
 
2. Choose Your Authentication Device Type
Select the type of device you'd like to enroll and click Continue. We recommend using a smartphone for the best experience, or iOS/Android tablets.  (If your phone does NOT have a phone plan, select "Tablet".)
 
3. Enter Your Phone Number
Select your country from the drop-down list and type your phone number. Use the number of your smartphone that you'll have with you when  logging in to a Duo-protected service.
Double-check that you entered it correctly, check the box, and click Continue.
  
An allowed phone number will prompt for a confirmation
 
If you're enrolling a tablet you aren't prompted to enter a phone number.
 
4. Choose Platform
Choose your device's operating system and click Continue.
 
5. Install Duo Mobile
Download the Duo Mobile App on the smartphone or tablet where you will recive the Duo notification.  Duo Mobile for iPhone or Duo Mobile for Android
After installing the app return to the enrollment window on the desktop, laptop or tablet where you are doing the setup and click "I have Duo Mobile installed".

6. Activate Duo Mobile
Activating the app links it to your account so you can use it for authentication.
On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the platform specific instructions for your device:
 
The "Continue" button is clickable after you scan the barcode successfully.
 
 
Can't scan the barcode? Click "Or, have an activation link emailed to your instead" or contact the helpdesk at (808) 675-3211 to have an activation link emailed to you.
 
7. Configure Device Options (optional)
You can use Device Options to give your phone a more descriptive name, or you can click "Add another device" to start the enrollment process again and add a second phone or another authenticator.
If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push"  and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone.
 
Click Continue to login to proceed to the Duo Prompt.
 
 
Congratulations!
Your device is ready to approve Duo authentication requests. Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.
 
Remember My Device
 
Click on the check box ‘Remember me for 365 days’ to bypass Duo on a device per browser.
 
Can Duo's Remembered Devices feature work if third-party cookies are blocked?
The Remembered Devices feature will work if an exception is made in the browser's security settings for third-party cookies coming from Duo Security.

Duo's cookies are only used to remember a Remembered Device. The cookies and associated data are never used for advertising or marketing purposes.

To add an exception for Duo-served cookies, use the following format, depending on which browser you're using:

Safari and Edge do not provide a mechanism for whitelisting specific sites. However, they do provide a way to globally allow all third-party cookies:

Safari:

  1. Go to Safari > Preferences
  2. Click the Privacy tab
  3. Disable the Block all cookies option
Note: Safari 12 for macOS 10.12 or later does not allow setting exceptions for third-party cookies. 
Note: iOS WKWebView limits the ability to issue and read browser cookies. This is intentionally designed by Apple, and Remembered Devices will not work.

Edge:

  1. Click More in the upper right of the toolbar
  2. Click Settings
  3. Scroll down and click on View Advanced Settings
  4. Scroll down to Cookies and ensure it is set to Don’t block cookies
  5. Restart Microsoft Edge
 
 
Another Chrome and DUO "Remember me..." Browser setting if the Chrome Exception above doesn't work
If the “Block third-party cookies” setting is turned on in Chrome you won’t be able to have the “Remember me for 365 days” option work.  You will still get the DUO Push but will have to approve each time.  If you turn off the setting as in the image below, DUO can set a security cookie and recognize your device for 365 days.
 
Safari and DUO "Remember me..." Browser setting
In order to allow DUO to place third party cookies on Safari the privacy preference settings have to have both boxes (Prevent cross-site tracking & Block all cookies) unchecked.
25% helpful - 12 reviews

Details

Article ID: 34723
Created
Thu 8/3/17 9:16 AM
Modified
Tue 7/21/20 9:08 PM