Using Duo multi-factor authentication while traveling internationally

You can use multi-factor authentication (MFA) around the world. Using the Duo Mobile app on your Android or iPhone is recommended because it gives you the flexibility to accept an identity-verifying phone call or receive a text message while you're in the US, use Duo Mobile Push over wireless anywhere in the world, or use stored passcodes when you don't have access to wireless at all.

Review the scenarios below to determine how you can keep your MFA active while you travel.

 

You will only have access to your US phone: Use Duo Mobile (Limited or No Connectivity)

Scenario: You will have access to your US phone. Your phone won't accept calls, but may be able to use wifi.

Solution: Make sure your phone is registered to use Duo Mobile. If your phone is currently registered to receive phone calls only, download Duo Mobile and change your registration type.

Before you leave the US:
  1. From the App Store or Google Play, download Duo Mobile onto your phone.
  2. Go to http://www.northwestern.edu/mfa-register, and remove your phone. This removes it from accepting phone calls only.
  3. Go back to http://www.northwestern.edu/mfa-register and register your phone to use Duo Mobile.

You will use an international phone number in addition to having your US phone: Add that phone number to Duo

Scenario: You will have access to your US phone. It won't accept calls, but can use wifi. You will also have access to an international phone.

Solution: Make sure your US phone is registered to use Duo Mobile. If your phone is currently registered to receive phone calls only, download Duo Mobile and change your registration type. Then add your international phone to your MFA profile yourself.

Before you leave the US:
  1. From the App Store or Google Play, download Duo Mobile onto your US phone.
  2. Go to http://www.northwestern.edu/mfa-register, and remove your phone. This removes it from accepting phone calls only.
  3. Go back to http://www.northwestern.edu/mfa-register and register your phone to use Duo Mobile.
Once you're in your destination country:
  1. From the App Store or Google Play, download Duo Mobile onto your international phone.
  2. Go to http://www.northwestern.edu/mfa-register and add your international phone to your MFA profile. Register it to use Duo Mobile. MFA will confirm this addition by contacting Duo on your US phone over wifi.
    • Since MFA can store multiple numbers, don't remove your existing US phone number. This way you can still use your US phone when you return to the US.

You will only use an international phone number and you know that number: Contact the IT Support Center before you leave the US

Scenario 1: You are taking your US phone with you and swapping out the US SIM card for a SIM card you'll use in your destination country. You will swap the US SIM card back into the phone when you return to the US.
Scenario 2: You will not have access to your US phone, but will have an international phone in your destination country, and you already know that phone number.

Solution: Provide the IT Support Center with information about your international phone so it can be manually registered to your MFA profile. Then when you're in your destination country, reactivate your phone using Duo Mobile.

Before you leave the US:
  1. Send an email message to consultant@northwestern.edu with the following information and the IT Support Center will manually register your phone:
    • Your NetID
    • A scan or photo of your Wildcard or government-issued photo ID (e.g., driver's license or passport)
    • The telephone number you want to add for Multi-Factor Authentication, including area code/country code
    • The type of telephone you're registering (iPhone, Android, other)
Once you're in your destination country:
  1. Swap the SIM card in your phone, if applicable.
  2. Make sure you have Duo Mobile downloaded onto your international phone from the App Store or Google Play.
  3. Go to http://www.northwestern.edu/mfa-register and reactivate Duo Mobile on your international phone.
    • Since MFA can store multiple numbers, don't remove your existing US phone number. This way you can still use your US phone when you return to the US.

You won't have access to any phone: Borrow a token before you leave the US

Scenario: You won't have access to any phone in your destination country.

Solution: Borrow a token from the IT Support Center.
  1. Visit the IT Support Center at 1800 Sherman Ave between 8am and 5pm Monday through Friday. Make sure you bring your Wildcard or government-issued photo ID (e.g., driver's license or passport)
  2. A token will be programmed for you and associated with your MFA profile.
  3. You will be able to borrow this token while you're abroad. You will need to return it once you return to Northwestern.

You've already left the US: Contact the IT Support Center

Scenario: You've already left the US and didn't register an international phone.

Solution: You will need to contact the IT Support Center to register your international phone.
  1. From the App Store or Google Play, download Duo Mobile onto your phone.
  2. Send an email message to consultant@northwestern.edu with the following information and the IT Support Center will manually register your phone:
    • Your NetID.
    • A scan or photo of your Wildcard or government-issued photo ID.
    • The telephone number you want to add for Multi-Factor Authentication, including area code/country code.
    • The type of telephone you're registering (iPhone, Android, other).
    • Follow the instructions in the email response you receive from the Support Center.

 

 

Was this helpful?
100% helpful - 1 review

Details

Article ID: 1398
Created
Thu 5/12/22 12:39 PM
Modified
Mon 3/18/24 12:06 PM