Directions to set up DUO:
To improve login security, BYUH systems now require Multi Factored Authentication (MFA). All current employees including student employees will be required to use MFA when logging into web resources. If you require assistance, please contact the university
helpdesk at (808)
808-675-3211.
1. Welcome Screen
On a desktop, laptop or tablet log into the
Student Center to get the Welcome Screen and click "Start setup" to begin enrolling your device.
2. Choose Your Authentication Device Type
Select the type of device you'd like to enroll and click Continue. We recommend using a smartphone for the best experience, or iOS/Android tablets.
(If your phone does NOT have a phone plan, select "Tablet".)
3. Enter Your Phone Number
Select your country from the drop-down list and type your phone number. Use the number of your smartphone that you'll have with you when logging in to a Duo-protected service.
Double-check that you entered it correctly, check the box, and click Continue.
An allowed phone number will prompt for a confirmation
If you're enrolling a tablet you aren't prompted to enter a phone number.
4. Choose Platform
Choose your device's operating system and click Continue.
5. Install Duo Mobile
Download the Duo Mobile App on the smartphone or tablet where you will recive the Duo notification.
Duo Mobile for iPhone or
Duo Mobile for Android
After installing the app return to the enrollment window on the desktop, laptop or tablet where you are doing the setup and click "I have Duo Mobile installed".
6. Activate Duo Mobile
Activating the app links it to your account so you can use it for authentication.
On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the platform specific instructions for your device:
The "Continue" button is clickable after you scan the barcode successfully.
Can't scan the barcode? Click "Or, have an activation link emailed to your instead" or contact the helpdesk at (808) 675-3211 to have an activation link emailed to you.
7. Configure Device Options (optional)
You can use Device Options to give your phone a more descriptive name, or you can click "Add another device" to start the enrollment process again and add a second phone or another authenticator.
If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone.
Click Continue to login to proceed to the Duo Prompt.
Congratulations!
Your device is ready to approve Duo authentication requests. Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.
Remember My Device
Click on the check box ‘Remember me for 365 days’ to bypass Duo on a device per browser.
Can Duo's Remembered Devices feature work if third-party cookies are blocked?
The Remembered Devices feature will work if an exception is made in the browser's security settings for third-party cookies coming from Duo Security.
Duo's cookies are only used to remember a Remembered Device. The cookies and associated data are never used for advertising or marketing purposes.
To add an exception for Duo-served cookies, use the following format, depending on which browser you're using:
Safari and Edge do not provide a mechanism for whitelisting specific sites. However, they do provide a way to globally allow all third-party cookies:
Safari:
- Go to Safari > Preferences
- Click the Privacy tab
- Disable the Block all cookies option
Note: Safari 12 for macOS 10.12 or later does not allow setting exceptions for third-party cookies.
Note: iOS WKWebView limits the ability to issue and read browser cookies. This is intentionally designed by Apple, and Remembered Devices will not work.
Edge:
- Click More in the upper right of the toolbar
- Click Settings
- Scroll down and click on View Advanced Settings
- Scroll down to Cookies and ensure it is set to Don’t block cookies
- Restart Microsoft Edge
Another Chrome and DUO "Remember me..." Browser setting if the Chrome Exception above doesn't work
If the “Block third-party cookies” setting is turned on in Chrome you won’t be able to have the “Remember me for 365 days” option work. You will still get the DUO Push but will have to approve each time. If you turn off the setting as in the image below, DUO can set a security cookie and recognize your device for 365 days.
Safari and DUO "Remember me..." Browser setting
In order to allow DUO to place third party cookies on Safari the privacy preference settings have to have both boxes (Prevent cross-site tracking & Block all cookies) unchecked.