Updating Duo MFA settings - Removal of SMS messaging and Telephone call capabilities

Beginning on July 10, Northwestern University is removing the option for users to authenticate using a telephone call or SMS text message passcode to confirm Duo Multi-factor Authentication (MFA) prompts. Going forward, the recommended method of MFA is to use the Duo Mobile app, which supports Duo Verified Push. This article contains instructions on how to: Download the Duo Mobile App, Navigate to Duo Manage Devices, and Activate your Northwestern Account in the Duo Mobile App.

To complete the sections outlined in this article, you will need a smart phone and computer.

 

Section 1: Download the Duo Mobile App

  This section will need to be completed from your smart phone.
  1. On your smart phone, install the Duo mobile application. If you already have Duo Mobile installed on your device you should check to ensure that the version you have installed will be compatible with Verified Push.
    • Download Duo Mobile for iOS

    • Download Duo Mobile for Android
  2. Once you have the app downloaded to your smart phone, proceed to Section 2. The Duo Mobile app will be used in Section 3.

Duo Mobile is the recommended method for multi-factor authentication at Northwestern. If you do not have access to a compatible smart phone or other mobile device, you may consider activating a Yubikey or using TouchID/Windows Hello.

Section 2: Navigate to Duo Managed Devices

  This section will need to be completed from your computer.
  1. On your computer open an incognito or private browser window
  2. Log in to NUValidate at https://nuvalidate.northwestern.edu
    NOTE: If you are already logged in, you will need to use a new browser or a private browser window to trigger the Duo MFA login page
  3. After entering your NetID and NetID password, ignore the Duo prompt to verify your login and instead click on Other options near the bottom of the window.

     
  4. Click on Manage devices 
  5. Verify your identity through one of your available options to manage your Duo devices.
    NOTE: Step 4 and Step 5 seem almost identical, but are necessary to get to Manage devices in Duo. Step 5 is asking you to verify your identity through Duo before it will allow you to see, add, or manage any of your Duo devices. If you do not have an active Duo verification option, contact the IT Service Desk.
  6. After you have confirmed this is your account via Duo login, you'll be in the Manage Devices page for Duo. You should see your phone number listed as one of the tiles.

     
  7. Proceed to next section to activate your Northwestern account in the Duo Mobile app.

Section 3: Activate your Northwestern Account in the Duo Mobile App

This section will require both your computer and smart phone to complete.
  1. After you have confirmed this is your account via Duo login (Section 2, Step 6), click the I have a new phone option in the tile that has your phone number listed.
    NOTE: Even though you may be using the same phone as you were before, selecting the I have a new phone option will allow you to use your current phone number and set up the Duo app on your smart phone.
     
  2. Click the Get Started button, in the Let's set up your phone pop-up window.
  3. Duo will want to confirm that your phone number is accurate. Click the Send me a passcode button to receive a passcode by text message or click Or call my phone to receive the passcode by phone call in the Confirm ownership pop-up window.
  4. Enter the passcode you receieved in the textbox provided in the Passcode sent pop-up window then click the Verify button.
  5. Click the Next button, in the Download Duo Mobile pop-up window.
  6. A QR Code will appear in the Scan this code in Duo Mobile pop-up window.
  7. On your smart phone, open the Duo Mobile app.
  8. In the Duo Mobile app, tap the blue Add button
  9. Tap the Use QR Code in the Add account window
  10. The app will open the camera on your phone, you will need to point your camera at QR code provided in Step 6.
  11. Once scanned, the Duo App will ask you to confirm the name of the account. You can leave the name as Northwestern University and tap the done button.
  12. In the Duo Mobile app on your phone, you will see Northwestern University listed in under your accounts.
  13. Congratulations! You successfully added your Northwestern account to the Duo Mobile app. You can confirm the app is working correctly by opening a different browser or incognito window and signing into NUValidate at https://nuvalidate.northwestern.edu or another authenticated Northwestern system.

 

Add a new device

After completing Steps 1-6 in Section 2: Navigate to Duo Manage Devices and you do not see your phone number listed as one of the available options:

  1. Click Add a device tile
  2. Select your desired authentication method and follow the on-screen prompts to configure your new device. Once complete, the new device should show as a separate tile on your Devices dashboard
  3. A QR Code will appear in the Scan this code in Duo Mobile pop-up window.
  4. On your smart phone, open the Duo Mobile app.
  5. In the Duo Mobile app, tap the blue Add button
  6. Tap the Use QR Code in the Add account window
  7. The app will open the camera on your phone, you will need to point your camera at QR code provided in Step 6.
  8. Once scanned, the Duo App will ask you to confirm the name of the account. You can leave the name as Northwestern University and tap the done button.
  9. In the Duo Mobile app on your phone, you will see Northwestern University listed in under your accounts.
  10. Congratulations! You successfully added your Northwestern account to the Duo Mobile app. You can confirm the app is working correctly by opening a different browser or incognito window and signing into NUValidate at https://nuvalidate.northwestern.edu or another authenticated Northwestern system.

 

Requesting Assistance

If you can no longer authenticate using Duo Mobile, contact the Northwestern University IT Service Desk at 847-491-4357 (1-HELP). 

If you are unable to contact Northwestern University IT by phone for assistance, send an email message to servicedesk@northwestern.edu. Be sure to include your NetID and a description of your situation. Our agents will review your ticket and follow up with potential next steps.
 

Smart Device Alternatives

If you do not have access to a compatible smart device, you may want to consider either a YubiKey or a Duo Hardware token. 
 

YubiKeys

YubiKeys are a bring your own device (BYOD) solution for Multi-Factor Authentication and can be purchased from a number of online retailers. You can review this article for information on recommended models.

Duo Hardware Tokens

Northwestern University Faculty and Staff may request their department purchase a Duo Hardware Token to use as their MFA device. If you are interested in using a Duo Hardware token send an email to servicedesk@northwestern.edu with the following information:

  • Your name
  • Your netID
  • A Department Chartstring to be charged $20

Assistance after Telephone and SMS Capabilities Removed

If your capability to authenticate using telephone calls or SMS messages has been removed and you want to explore using a YubiKey or Hardware Token, please contact the Northwestern University IT Service Desk at 847.491.4357 (1-HELP) to discuss your options for access.

 


 

Was this helpful?
14% helpful - 36 reviews