Students Duo Multifactor Authentication Enrollment
- Michele Moyer
Welcome to Lehigh!
Please set time aside to complete the entire enrollment process to avoid being denied access to applications and resources.
Setting up Duo Two-Factor Authentication (2FA)
Please complete the entire process of installing the mobile app and scanning the QR code. If you abandon the steps after adding your mobile number, Duo will not allow access to Lehigh’s resources because the enrollment is not complete.
Why is 2FA important?
Two-factor authentication (2FA), often referred to as multi-factor authentication, enhances your account's security by introducing an additional verification step. This means that even if someone obtains your password, they cannot access your account without completing this second layer of verification. An example of two-factor authentication is the withdrawing of money from an ATM; only the correct combination of a bank card (something the user possesses) and a PIN (something the user knows) allows the transaction to be carried out.
Let's get started
What you'll need before you begin:
Your smartphone or tablet (highly recommended).
A computer to navigate to the enrollment page and easily scan the Duo generated QR code from.
Download and install Duo Mobile App on your smartphone or tablet from the Google Play Store or Apple App Store.
Step 1. Navigate to the Duo Enrollment Page and enter your Lehigh username and password (just created when you claimed your account).
Step 2. Click on “Get Started”
Step 3. Please choose "Duo Mobile" for verification. We highly recommend using a smartphone or tablet equipped with the Duo Mobile app.
Step 5. Confirm your entry. In the example above, only the last 4 digits are shown however your full mobile number will appear
Step 6. You may be asked to confirm ownership of the number entered previously and click on “Send me a passcode”. If you are not prompted for ownership confirmation, skip to Step 8.
Please complete the entire process of installing the mobile app and scanning the QR code. If you abandon the steps after adding your mobile number, Duo will not allow access to Lehigh’s resources because the enrollment is not complete.
Step 7. Enter the passcode sent to your mobile device and click on Verify.
Step 8. Download and install Duo Mobile on your mobile device from the Google Play Store or Apple App Store. Once you have Duo Mobile installed click Next.
Step 9. On your mobile device, open the Duo Mobile app and scan the QR code displayed on the computer. This step links your device to your account.
Please complete the entire process of installing the mobile app and scanning the QR code. If you abandon the remaining steps after adding your mobile number, Duo will not allow access to Lehigh’s resources because the enrollment is not complete.
Step 10. When you receive confirmation that Duo Mobile was added click Continue.
Step 11. Click on “I do not want to add more devices”.
Duo enrollment is now complete!
Please continue and test the enrollment in the steps that follow.
Let’s Test the Setup!
Step 1. “Log in using Duo” and follow the steps to log in.
Step 2. A prompt to check for Duo Push will appear on your computer screen.
Step 3. A Duo prompt will appear on your mobile device. Click on “Approve”. (Below is a sample prompt).
Step 4. Validate that the prompt originated from a device that belongs exclusively to you or if it is shared with others.
Step 5. If successful, you will see the screenshot below.
Step 6. Once completed, you will see a page with your device listed.
Thank you for completing the steps to test your Duo enrollment!
Information on available Duo factors, how they function and issues you may run into.
Duo mobile App - The Duo Mobile app (secure mobile authentication) is a mobile application used for two-factor authentication (2FA) that allows users to securely log into various Lehigh University or online services by receiving push notifications or generating passcodes on their phone, essentially adding an extra layer of security to logins.
Function: It sends push notifications to your phone when you try to log in to a protected account, allowing you to quickly approve or deny access with a single tap.
Issues you may encounter using the Duo mobile app:
No internet connectivity.
Disabled notifications.
Push notifications not registered.
Third-party accounts not backed up.
Disabled accounts connected to Duo Mobile.
You lost your phone
Common Issues - Guide to Two-Factor Authentication · Duo Security
Roaming Authenticator - Roaming authenticators, sometimes referred to as cross-platform or external authenticators, refer to those that are not tied to any one particular platform but can be used to authenticate across multiple devices and must be FIDO2 compliant. The quintessential example is a hardware security key, such as the YubiKey.
Function: A FIDO2 key functions by using public-key cryptography to securely authenticate a user without needing a password; when a user registers with a service, the key generates a unique key pair, storing the private key on the device and sending the public key to the service; when logging in, the service sends a challenge that only the private key on the FIDO2 key can sign, verifying the user's identity without exposing any sensitive information to the server.
Issues you may encounter using a roaming authenticator:
Forgot your security key - Use your backup codes or authentication methods previously registered.
Lost or report your security key stolen What should I do if my authentication device is lost or stolen?
Hardware failures may occur
Backup Codes - Duo backup codes are a set of unique, one-time use codes generated within the Duo Mobile app.
Function: Backup codes allow you to log into your accounts even if you can't access your primary authentication method like your phone or roaming authenticator, essentially acting as a backup option in case you lose your device or can't receive verification codes; they should be printed and stored securely in a separate location.
Lehigh University : Generate Duo Backup Codes for Two-Factor Authentication - LTS Knowledge Base - Lehigh Confluence
Issues you may encounter using backup codes
Invalid passcode or Incorrect code
Expired - Backup codes are one time use only
Make sure you typed it correctly
Use backup codes associated with the correct account
Create new backup codes Duo Backup Code Generator
Additional Support Information
FAQ - Two-factor Authentication with Duo - LTS Knowledge Base - Lehigh Confluence
Troubleshooting:
Having trouble scanning the QR code?
Make sure your phone's camera is working and that you have a good internet connection. Try adjusting the lighting or moving your phone closer or further away from the screen.
Make sure you grant the camera appropriate permissions on your phone while using the Duo Mobile app.
Lost your phone? Contact our Help Desk at the number listed below immediately so they can help you update your Duo settings.
We're here to help! Should you have any questions or trouble enrolling in Duo, please do not hesitate to contact our Library and Technology Services Help Desk at (610)758-4357 for assistance.
Remaining steps after successfully enrolling in Duo multifactor authentication:
Activate your Gmail Account - Lehigh University’s official email service that is part of Google Workspace, formerly known as G Suite. Google Workspace is a collection of tools for productivity, collaboration, and communication.
Hawkwatch Alerts Enrollment - Lehigh University’s official personal safety mobile app for important alerts and more.
General Computing Account Usage - How to get your LIN, use Banner self-service, sign up for LU password manager Keeper and more.
Related content
For immediate help, contact the LTS Help Desk (Hours)
EWFM Library | Call: 610-758-4357 (8-HELP) | Text: 610-616-5910 | Chat | helpdesk@lehigh.edu
Submit a help request (login required)