Managing Devices with DUO Security

Audience: Faculty, Researchers and Staff

This KB Article References: DUO Security Two-Step Login
This Information is Intended for: Faculty, Researchers, Staff
Last Updated: March 13, 2019

This documentation will explain:


Introduction to Managing your Duo Devices

The Duo Self Service Portal allows you to add, remove or change default devices. 

  • Why add additional devices?  
    • It is highly recommended that you have at least 2 devices enrolled in case one becomes damaged or unavailable.   If you do not have at least a second device enrolled, you can put in a ticket with support and they will work with you to find a solution.  However, if you do have another device enrolled and your default device is unavailable, you can quickly switch default devices in the Duo Self Service Portal. 
  • What is the default device?  Why is it so important?
    •  Your default device is the main device you plan on using to log into any system that requires two-step login.  The recommendation is to use your smart phone with the Duo app installed.  This will send a push notifcation any time you log into a system that requires two-step.  You will be prompted to approve the request on your smart phone to finish authenticating into the system.
    • Your default device must be in hand to enroll secondary devices. If your default device is unavailable, you will not be able to enroll a second or third device.  
    • Should your default device become unavailable, you can switch it to another device like a landline or tablet.  However, these devices must have been previously enrolled to make the switch in the Duo Self Service Portal.   If you do not have a 2nd device enrolled that is available to you, you'll need to report it by creating a ticket or calling support.

 


    Signing into the Duo Self Service Portal

    Signing into the Duo Self Service portal is a two step process.  First you will sign into the NetID single sign on screen then you will need to authenticate using your default device (the first one you registered with).  Make sure you have your default device handy.  To make this process easiest, use a computer (not a tablet or mobile phone) while following the instructions below.

    1. To add, remove or change the default device you authenticate from, log in with your NetID and NetID Password to Duo Self Service Portal:  https://duoselfservice.stonybrook.edu/ 
    2. IMPORTANT:  Next, you will need to authenticate further into the portal, choose a device and then choose an authentication method on the screen below.  If you do not see the down arrow ▼ in the Device field, then you only have 1 device enrolled.  You can only use this device to finish authenticating into the Duo Self Service Portal.  If the device is unavailable, you'll need to contact support to get a passcode to enter.
    3. Next:
      • If you chose Send Me a Push (recommeded) approve it on your mobile device
      • If you chose Call Me, answer your phone to approve.
      • If you chose Enter a Passcode, enter the correct code into the Duo Self Service Portal screen.
        *See Authenticated Methods expained below.
    4. Once you correctly authenticate, on the Duo Self Service Portal page you will see
      1. the device(s) you have listed
      2. the option to Add another device
        *See Add a Device explained below
      3. the option to change your default device (once you have at least 2 devices registered)
      4. the option of how you want to receive authentication.
      5. Click Save when finished. 

    Authenticated methods explained 

    • Duo Push - A push notification is a message that pops up on your device that has the Duo App installed.  This is the recommended method. When you receive a push notification on your phone, you will be prompted to "Approve" by tapping a button on your phone.
      example:
    • Call Me - This is a phone call that can be from any smart phone or landline that you have previously enrolled in Duo.  Your phone will ring and when you answer it, you will be asked to press any key to finish the authentication.
    • Passcode - If all other options are unavailable, the Duo Administrator may send you a passcode to enter to finish the authentication. 

    Once you have passed this screen you can add, remove or change the default device from the instructions below:


    Adding a Device

    1. Choose a device to add.  We will choose a landline (office phone) as a second device:
    2. Enter the number and verify it is correct:
    3. Click Continue and then Save at the bottom of the screen.

    Removing a Device

    1. Click Device Options next to the device you want to remove:
    2. Click the trash can button to remove this device:

    Changing the Default Device

    Next to  Default Device click the down pointing arrow to select another device:

    Then scroll down and click Save.

     

     

    Additional Information


    There are no additional resources available for this article.

    Getting Help


    The Division of Information Technology provides support on all of our services. If you require assistance please submit a support ticket through the IT Service Management system.

    Submit A Ticket

    Supported By


    Customer Engagement and Support