Duo Multi-Factor Authentication (MFA)

Your safety is important at UNT and that includes your digital safety. The university is adding Duo Multifactor Authentication to help protect access to UNT accounts by prompting users for login verification using a device like a smartphone, tablet or landline phone. Please enroll in DUO MFA if you have not done so already. Once enrolled in MFA, you'll occasionally get authentication prompts on your mobile device when you access services like Office 365, webmail, MyLab, and various areas of MyUNT/EIS.

Duo is a form of multi-factor authentication that uses a mobile device, phone, passcode or token to verify that the person logging into your account is actually you. Duo adds a second layer of defense against unauthorized logins to your UNT account. MFA is common for services such as online banking, social media platforms, online shopping merchants, and various email services.

Duo MFA increases the security of YOUR information by adding a second layer of authentication while accessing your online services. MFA is a common industry technology that prevents cyber crimes such as identify theft and cyber stalking.

You can use a variety of devices with Duo MFA, including cell phones, landline phones, tablets, and even key chain tokens. Please see the Duo Supported Devices website for more information.

The official Duo website has a vast amount of helpful guides, videos, instructions, and more. Please visit the Duo website to learn more.

If your UNT Office 365 account is set to use Duo MFA, you will occassionally need to approve Duo authentication prompts on your device when you access O365 services such as UNT email, OneDrive, and online Office applications. The frequency of the Duo MFA prompts depends on the service you are accessing and the duration of your login session. Some services, such as the Outlook program running on your computer, will rarely prompt for MFA. Other services, such as UNT webmail with your browser, will prompt more often. The Duo MFA prompt may offer a "Remember me" option to reduce how often you need to approve MFA when logging in.

Effective from June 9th, 2023, UNT will implement Multi-Factor Authentication (MFA) for all staff accessing Peoplesoft EIS. This is a complicance requirement for the Gramm-Leach-Bliley Act (GLBA) regulations.

Please follow these steps to activate your Duo account and add a device for use with MFA:

1. Visit the MFA Portal.
2. Login with your EUID and Password.
3. Select "Enroll in MFA".
4. When prompted, verify your identity by providing your data that matches what is in your UNT record.
5. Select "Start Setup".
6. Select the type of device you'd like to use. The recommended type is a mobile phone.
7. When prompted, enter your mobile number.
8. Select your platform (iOS or Android).
9. Install the free Duo Mobile app on your device.
10. Use the Duo Mobile app on your device and follow the prompt to point your camera at the QR code on the screen.

If you might have used Duo in the past but need to confirm or update your account:

1. Visit the MFA Portal.
2. Login with your EUID and Password.

If you see a prompt to select a device for authentication, then you are already configured for Duo MFA. See "How can I test my Duo MFA device" to confirm that everything is working.

OR

If you see a menu that says "Enroll in MFA" then you do not have an active Duo device. See "How do I add a device to my Duo account" to proceed.

Yes! You can choose to protect your UNT O365 services, such as email and OneDrive, NOW by setting up your Duo account and activating MFA+O365.

1. First, visit the MFA Portal to setup your device(s) for MFA.

• • If you are NOT on the UNT network:
    Login to the UNT VPN then type "aits.unt.edu/mfao365" into the "http" field and click "Browse".
  • If you ARE on the UNT network:
    Open the MFA+0365 activation page

2. Login to the MFA+O365 activation page with your UNT EUID and password.

3. Click the "Enable MFA" button next to your email address to activate MFA for that email account.

1. Visit the MFA Portal and login with your EUID and Password
2. Authenticate with one of your existing devices
3. Follow these steps to add a new device

Some mobile browsers do not provide the menu option to add an NFC token to your Duo account. In this case, you need to login to the MFA Portal with a desktop browser to find the option to add a Security Key token. After the token is added, you can then use the token with your mobile phone for MFA logins.

You can test your MFA account by logging in to the MFA Portal. You will see a menu to select one of your devices to receive a Duo MFA prompt. Select a device and then check the device for an Duo prompt. If you approve the MFA prompt on the device and the website continues to login, you are all set! If you have trouble advancing, please contact technical support for assistance.

Yes, we strongly encourage you to add a secondary device to your Duo MFA enrollment. Follow these steps to add another device.

If you are using a mobile device to activate Duo and cannot scan the QR code because it is displayed on the device itself or if your camera is unavailable, you can still activate Duo by selecting one of the options BELOW THE QR CODE. If you already have the Duo Mobile app installed, you can click "Take me to Duo Mobile Instead". Alternatively, you can select "Email me an activation link instead" - just open the email on the device itself and click the activation link in the Duo email.

VPN access will require Duo multi-factor authentication (MFA) in addition to your UNT account password. Note: The DUO Mobile App is the default MFA method for VPN. See DUO Append Mode for alternate MFA methods. Check out the DUO VPN Access guide for more information.

This is a security enhancement to guard against password compromises to prevent unauthorized access to UNT VPN and the resources protected the VPN service. This security enhancement will reduce the risk to your UNT account and our data.

1. Install DUO Mobile on your new mobile device (iOS or Android).
2. Open the DUO Mobile app and select "Set up account". You will be prompted for a QR code or an activation code.
3. Login to the MFA Portal using PC or other device.
4. If you have a secondary MFA device registered, select that device, and approve the MFA request. If you DO NOT have a secondary MFA device, select "Enter a Passcode" and then click the "Text me new codes" button that appears at the bottom.
5. You should receive a text message from DUO with an MFA code. Type that code into the DUO website and click "Log In".
6. You will now see a list of your MFA devices. If your phone is listed, click "Device Options" next to the entry for your phone and click "Reactivate Duo Mobile" and follow the prompts to enable DUO on your phone. If your phone is not listed, click "+Add another device" at the bottom and follow the prompts to register your phone to use DUO.
7. Note: If you are using a mobile device to activate Duo and cannot scan the QR code because it is displayed on the device itself or if your camera is unavailable, you can still activate Duo by selecting one of the options BELOW THE QR CODE. If you already have the Duo Mobile app installed, you can click "Take me to Duo Mobile Instead". Alternatively, you can select "Email me an activation link instead" - just open the email on the device itself and click the activation link in the Duo email.

If you try to login to a UNT system and get an error about not being enrolled in Duo, please see the "How do I start using Duo MFA" to configure your UNT Duo MFA account.

Technical support can provide you with a temporary bypass code that you can use until you have access to your device again.

If you get a message from Duo indicating that your account is disabled, please contact technical support. After verifying your identity, the Helpdesk can help you re-enable your Duo account.

If you get a message from Duo indicating that your account is locked out due to excessive authentication failures, you can wait 90 minutes for the lock to clear before you try again. Additionally, you can contact technical support for assistance with unlocking your Duo account.

If you can't login using your device, contact technical support. After verifying your identity, the Helpdesk can help you re-activate your device or add a new device.

Duo MFA supports a variety of methods beyond the Duo mobile app.

• Landline phone = Duo can perform an automated voice call that will provide an MFA code that you use to authenticate.
• Tablet = many tablets such as iPads and Nexus device can operate the Duo Mobile application. Check your device app store for the Duo Mobile app.
• Security Key Token = Duo supports a variety of physical Security Key tokens that are small keychain devices that you can plug in to your device or connect via NFC. The Yubikey 5 NFC is a popular token that works with most computers and mobile devices. Check the product details to confirm functionality with Duo.

You can use a cell phone to receive text message codes instead of using the Duo Mobile app. Enroll your mobile phone into Duo and select “Other” as the phone type and the device will register to Duo without requiring the Duo Mobile app.