Something you know + Something you have

Duo 2 factor authentication process

Quick Start Videos

Check out the videos below for more information about Duo and why CSU uses it, find out how to register and manage your devices, and what to expect with Duo and Microsoft 365 applications.

Intro to Duo

Register 1st Device

Add Devices

Manage Devices

Duo & Microsoft 365

iPhone Account Help

What is Duo and why does CSU use it?

Duo is a tool that provides two-factor authentication to better protect your account by requiring an additional piece of information beyond your username and password. When you access certain CSU services – including Microsoft 365 applications (OneDrive, Teams, etc.) and university email accounts, VPN, using both the Pulse Client and secure.colostate.edu – you will be required to use a device that you have (your mobile phone, desk phone, a hardware token, or other device) to provide an additional layer of security to your account. This is done by receiving a push authentication request through the Duo Mobile App, a phone call, or entering a generated code.

Attention iPhone users: See our FAQ page for what to expect with your device when Duo is enabled

How Do I Get Started?

You can register (any and all) of the following devices for Duo Two Factor Authentication.

We recommend that you set up more than one device as a 2nd factor authentication method with Duo. If you lose, misplace or simply forget a device, having a second registered device will save the day.

    The Duo Mobile App (Recommended): Download the Duo Mobile App from your smartphone or tablet’s app store. Once registered, this method will allow Duo to push a message to your phone or tablet where you can verify your identity by tapping the screen. The Duo Mobile App also has a one-time code feature that functions even when the device can’t reach a cellular or Wi-Fi network.

    Any Phone Number: You can register your cell phone, desk phone, home phone, etc. and the system will call you to validate your identity.

    A Hardware Token: These can be purchased from RamTech for $23.75 and will be registered to your account at time of purchase. Hardware tokens generate a six-digit code that you can use to authenticate. 

For Support:

Central IT Support Helpdesk:
Colorado State University
Morgan Library – 1st Floor
Phone: (970) 491-7276
Email: help@colostate.edu
Hours & Additional Information

New Features Available!

Once you have registered at least one device, you will be able to use Duo’s Self Service features to manage and add additional devices. Access to these settings will be on the Duo Prompt page:

Duo Self Service Prompt, Add a new device and My Settings & Device options

Some of the features you will now have access to include setting a default authentication method, adding new types of devices, reactivating Duo Mobile, and the ability to change device names.

Please see Duo’s comprehensive guide for information and instructions on many of their features. You can also check out our quick start videos on Adding Additional Devices and how to manage devices with My Settings & Devices.

Register your 1st Device: Step-by-Step Guides

Register and Activate the Duo Mobile App

Download Duo Mobile App

To use a smartphone or tablet for Two-Factor Authentication, the Duo Mobile app must be downloaded and installed on the device.

Duo Mobile for iPhone

Duo Mobile for Android

Duo Mobile for Windows Phone

Register a smartphone or tablet

To register a smartphone or tablet, login to the eID Duo Self Service page with your eName and ePassword.

Click on the Register Device link on the right side of the Two-Factor Authentication page.

Provide a unique Device Name (Smartphone, tablet, iPhone, Android, etc.,) for the device.

*A phone number is not needed for a tablet and it is optional when registering a smart phone. If a phone number is added, users will have the option to receive a phone call from DUO on their smartphone for authentication.

Click on the Type dropdown and select DUO mobile app.

Click on the Platform dropdown to select the device platform, Apple iOS, Google Android, Windows Phone 7, etc.

Google\Android example

iPad example

Once all necessary device information is entered, click the Save button to save the device information.

After you click Save, the page will refresh to the Two-Factor Device Activation page with a barcode displayed. Leave this page open and move to the next step.

Activate Duo Mobile App

To Activate the DUO mobile app, open the Duo Mobile app on your device and then click on the + icon in the upper right corner.

This will bring up the Duo Mobile app’s barcode scanner. Scan the barcode on the Two-Factor Device Activation page with the app’s barcode scanner.

When the device activates, the Duo Mobile app will display Colorado State University as an account.

On the Two-Factor Device Activation page, click on Return to display your Registered Devices.

Register another device

To register another device, click on the Register Device link.

Test your Account

To confirm the successful registration and activation of your device(s), visit the Pulse Secure Connection page and follow the prompts to log-in and authenticate with Duo.

Register to Authenticate with a Phone Call

To register a phone to authenticate with a phone call, login to the eID Duo Self Service page with your eName and ePassword.

Click on the Register Device link on the right side of the Two-Factor Authentication page.

Register Device Link for Duo

Provide a unique Device Name (Office Phone, Home Phone, etc.) for the device and enter the phone number.

Duo Register Device Name and Phone Number

Click on the Type dropdown and select phone call.

Duo Register Type Drop Down Phone Call

Click on the Platform dropdown and select Generic Phone.

Duo Register Platform Drop Down Phone

Once all necessary device information is entered, click the Save button.

Duo Register Save Screenshot

See the What to Expect: Duo Authentication “Call Me” guide, for details on the authentication experience with this method.

Test your Account

To confirm the successful registration of your device(s), visit the Pulse Secure Connection page and follow the prompts to log-in and authenticate with Duo.

What to Expect: Duo Authentication

When logging into a website that utilizes Two Factor Authentication, users will first login using their CSU credentials.

Upon logging in, the Duo prompt will populate allowing users to choose how to verify their identity.

If more than one device was registered, make sure to select the one you want to use for this session from the Device dropdown menu.

Options for Duo Authentication:

Expand the sections below for details on what to expect when you authenticate with each method.

Click on the Send Me a Push button to receive a login request using the Duo Mobile App on a smartphone or tablet.

Duo Prompt Send Me a Push Screenshot

If the device screen is locked or asleep when the push notification is sent, unlock the device and click on the notification, which will open the Duo Mobile App.

If the Duo Mobile app is opened, click on the Request waiting notice.

To Approve the login request, click on the Approve button in the Duo Mobile app.

Important: If a notification is ever received when you are not trying to log in, click the Deny button.

Once the notification has been approved, you will be logged into the requested website.

Click on the Call Me button to receive a phone call from Duo to your registered device.

Duo Prompt Call Me Screenshot

The status bar at the bottom of the Duo prompt will update at each step of the process.

Answer the call and listen to the instructions to authenticate. The Duo Prompt status bar will also display how to approve the request over the phone.

Click on the Enter a Passcode button to authenticate using a passcode generated from the Duo Mobile App.

Duo Prompt Enter Passcode Screenshot

Open the Duo Mobile App on your device and then click on the down arrow next to the Colorado State University Account.

The Duo Mobile App will populate a 6-digit code under the Colorado State University account.

Enter the 6-digit passcode from the Duo Mobile App into the passcode textbox and then click on the Log In button.

To authenticate using a hardware token, click the ‘Enter a Passcode’ button. Note: Using the Device dropdown menu to select your token is not necessary before entering the passcode.

Duo Prompt Enter Passcode Screenshot

Press the button on your hardware token to generate a new passcode, type it into the space provided, and click on the Log In button.

Tokens can get “out of sync” if the button is pressed too many times in a row and the generated passcodes aren’t used for login. Contact the Central IT Support Helpdesk if your token stops working.

If you need a hardware token, one can be purchased and configured at RamTech in the Lory Student Center.

Duo Authentication to Connect to CSU’s VPN (Pulse Secure)

Duo Two-Factor Authentication is required when accessing CSU’s VPN, the Pulse Connect Secure gateway; whether accessed via the Pulse Secure Desktop Client or the web interface (secure.colostate.edu).

Information for using Pulse Secure can be found on the ACNS Security page.

Pulse Secure Desktop Client: Add a New Connection

To add a new connection to the Pulse Secure Client, open Pulse Secure and click on the + icon.

Pulse Secure Add Connection Screenshot

The “Add Connection” window will appear.

Provide a unique name in the Name text box.

In the Server URL textbox, enter secure.colostate.edu and then click on the Add button.

Pulse Secure Add Connection Window Screenshot

This will now appear in the list of connections.

Pulse Secure Connection List Screenshot

Connect using Pulse Secure (Client and Web)

When connecting to CSU’s VPN from off-campus, users will have to authenticate using Duo. There are two ways to access the VPN, via the Pulse Secure Desktop Client or the web interface.

To use the desktop version, open the Pulse Secure Client and click the Connect button next to the appropriate connection on the list.

Pulse Secure Connect Button Screenshot

To use the web interface, go to secure.colostate.edu

(The following instructions and screenshots apply to both the desktop client and web interface)

When the Welcome screen displays, login with your eName and ePassword and click Sign In.

secure.colostate.edu Log-In Screenshot

Upon logging in, the Duo prompt will populate allowing users to choose how to verify their identity.

Note: If more than one device was registered, make sure to select the one you want to use for this session from the Device dropdown menu.

Duo Prompt Device Drop Down Menu Screenshot

For information on authenticating with different methods, see the What to Expect: Duo Authentication guide.

Unique to the VPN Duo prompt, users can check the box “Remember me for 7 days” prior to authenticating, to avoid being asked to authenticate again for one week.

Secure.colostate.edu Duo Prompt Remember Me Screenshot

Once the connection has been established, the desktop client will update to reflect the successful connection.

Pulse Secure Established Connection Screenshot

This window can now be closed and the connection will stay established until timeout occurs, at which point the user will be prompted to authenticate again.

Once the connection has been established in the web version, the secure.colostate.edu home page will be displayed.

secure.colostate.edu welcome screenshot