It is important to ensure you have more than one device enrolled into Duo and that you set your default device to one that is always available to you, like a mobile phone.  

Familiarize yourself with the information below before logging in to the  Duo Self-Service Portal:  https://duoselfservice.stonybrook.edu/ 

This documentation will explain:

• Signing into the Duo Self Service Portal
• Adding a Device
• Removing a Device
• Changing your Default Device 

Introduction to Managing your Duo Devices

The Duo Self Service Portal allows you to add, remove or change default devices. 

• Why add additional devices?  
  • It is highly recommended that you have at least 2 devices enrolled in case one becomes damaged or unavailable.   If you do not have at least a second device enrolled, you can put in a ticket with support and they will work with you to find a solution.  However, if you do have another device enrolled and your default device is unavailable, you can quickly switch default devices in the Duo Self Service Portal. 
• What is the default device?  Why is it so important?
  •  Your default device is the main device you plan on using to log into any system that requires two-step login.  The recommendation is to use your smart phone with the Duo app installed.  This will send a push notifcation any time you log into a system that requires two-step.  You will be prompted to approve the request on your smart phone to finish authenticating into the system.
  • Your default device must be in hand to enroll secondary devices. If your default device is unavailable, you will not be able to enroll a second or third device.  
  • Should your default device become unavailable, you can switch it to another device like a landline or tablet.  However, these devices must have been previously enrolled to make the switch in the Duo Self Service Portal.   If you do not have a 2nd device enrolled that is available to you, you'll need to report it by creating a ticket or calling support.

Logging into the Duo Portal to Add or Remove Devices

Larger Video

Signing into the Duo Self Service Portal

Signing into the Duo Self Service portal is a two step process.  First you will sign into the NetID single sign on screen then you will need to authenticate using your default device (the first one you registered with).  Make sure you have your default device handy.  To make this process easiest, use a computer (not a tablet or mobile phone) while following the instructions below.

1. To add, remove or change the default device you authenticate from, log in with your NetID and NetID Password to Duo Self Service Portal:  https://duoselfservice.stonybrook.edu/ 
   
2. If you get the message that Your account is not enabled for DUO, clear your browser cache and cookies and repeat from step 1 again.
3. IMPORTANT:  Next, you will need to authenticate further into the portal, choose a device and then choose an authentication method on the screen below.  If you do not see the down arrow ▼ in the Device field, then you only have 1 device enrolled.  You can only use this device to finish authenticating into the Duo Self Service Portal.  If the device is unavailable, you'll need to contact support to get a passcode to enter.
   
4. Next:
   • If you chose Send Me a Push (recommended) approve it on your mobile device
   • If you chose Call Me, answer your phone to approve.
   • If you chose Enter a Passcode, enter the correct code into the Duo Self Service Portal screen.
     *See Authenticated Methods expained below.
5. Once you correctly authenticate, on the Duo Self Service Portal page you will see:
   1. The device(s) you have listed
   2. The option to Add another device
      *See Add a Device explained below
   3. The option to change your default device (once you have at least 2 devices registered). 
   4. The option of how you want to receive authentication.  When you have 2 devices listed you can select the option to "Allow me to choose an authentication method"
      
   5. Click Save when finished. 

Authenticated methods explained 

• Duo Push - A push notification is a message that pops up on your device that has the Duo App installed.  This is the recommended method. When you receive a push notification on your phone, you will be prompted to verify your identity and "Approve" by tapping a button on your phone.
  example:
  
• Call Me - This is a phone call that can be from any smart phone or landline that you have previously enrolled in Duo.  Your phone will ring and when you answer it, you will be asked to press any key to finish the authentication.
• Passcode - If all other options are unavailable, the Duo Administrator may send you a passcode to enter to finish the authentication. 

Once you have passed this screen you can add, remove or change the default device from the instructions below:

Adding a Device

1. Choose a device to add.  We will choose a landline (office phone) as a second device:
   
2. Enter the number and verify it is correct:
   
3. Click Continue and then Save at the bottom of the screen.
   Check to make sure your Default Device is correct, that it is a device you will always have on you.    Also, to ensure that you can authenticate regardless of which device you have available to you, choose When I log in:  Ask me to choose an authentication method
   

Removing a Device

1. Click Device Options next to the device you want to remove:
   
2. Click the trash can button to remove this device:
   

Changing the Default Device

Next to  Default Device click the down pointing arrow to select another device:

Then scroll down and click Save.