Updating Duo MFA settings - Removal of SMS messaging and Telephone call capabilities

Beginning on July 10, Northwestern University is removing the option for users to authenticate using a telephone call or SMS text message passcode to confirm Duo Multi-factor Authentication (MFA) prompts. Going forward, the recommended method of MFA is to use the Duo Mobile app, which supports Duo Verified Push. This article contains instructions on how to: Download the Duo Mobile App, Navigate to Duo Manage Devices, and Activate your Northwestern Account in the Duo Mobile App.

To complete the sections outlined in this article, you will need a smart phone and computer.

Section 1: Download the Duo Mobile App

1. On your smart phone, install the Duo mobile application. If you already have Duo Mobile installed on your device you should check to ensure that the version you have installed will be compatible with Verified Push.

   • Download Duo Mobile for iOS

   • Download Duo Mobile for Android
2. Once you have the app downloaded to your smart phone, proceed to Section 2. The Duo Mobile app will be used in Section 3.

Duo Mobile is the recommended method for multi-factor authentication at Northwestern. If you do not have access to a compatible smart phone or other mobile device, you may consider activating a Yubikey or using TouchID/Windows Hello.

Section 2: Navigate to Duo Managed Devices

1. On your computer open an incognito or private browser window
2. Log in to NUValidate at https://nuvalidate.northwestern.edu
   NOTE: If you are already logged in, you will need to use a new browser or a private browser window to trigger the Duo MFA login page
3. After entering your NetID and NetID password, ignore the Duo prompt to verify your login and instead click on Other options near the bottom of the window.
   
    
4. Click on Manage devices 
   
5. Verify your identity through one of your available options to manage your Duo devices.
   NOTE: Step 4 and Step 5 seem almost identical, but are necessary to get to Manage devices in Duo. Step 5 is asking you to verify your identity through Duo before it will allow you to see, add, or manage any of your Duo devices. If you do not have an active Duo verification option, contact the IT Service Desk.
   
6. After you have confirmed this is your account via Duo login, you'll be in the Manage Devices page for Duo. You should see your phone number listed as one of the tiles.
   
    
   If your cell phone does not appear in the list of devices, follow the instructions below for Add a new device
7. Proceed to next section to activate your Northwestern account in the Duo Mobile app.

Section 3: Activate your Northwestern Account in the Duo Mobile App

1. After you have confirmed this is your account via Duo login (Section 2, Step 6), click the I have a new phone option in the tile that has your phone number listed.
   NOTE: Even though you may be using the same phone as you were before, selecting the I have a new phone option will allow you to use your current phone number and set up the Duo app on your smart phone.
    
2. Click the Get Started button, in the Let's set up your phone pop-up window.
   
3. Duo will want to confirm that your phone number is accurate. Click the Send me a passcode button to receive a passcode by text message or click Or call my phone to receive the passcode by phone call in the Confirm ownership pop-up window.
   
4. Enter the passcode you receieved in the textbox provided in the Passcode sent pop-up window then click the Verify button.
   
5. Click the Next button, in the Download Duo Mobile pop-up window.
   
6. A QR Code will appear in the Scan this code in Duo Mobile pop-up window.
   
7. On your smart phone, open the Duo Mobile app.
   
8. In the Duo Mobile app, tap the blue Add button
   
9. Tap the Use QR Code in the Add account window
   
10. The app will open the camera on your phone, you will need to point your camera at QR code provided in Step 6.
11. Once scanned, the Duo App will ask you to confirm the name of the account. You can leave the name as Northwestern University and tap the done button.
    
12. In the Duo Mobile app on your phone, you will see Northwestern University listed in under your accounts.
    
13. Congratulations! You successfully added your Northwestern account to the Duo Mobile app. You can confirm the app is working correctly by opening a different browser or incognito window and signing into NUValidate at https://nuvalidate.northwestern.edu or another authenticated Northwestern system.

Add a new device

After completing Steps 1-6 in Section 2: Navigate to Duo Manage Devices and you do not see your phone number listed as one of the available options:

1. Click Add a device tile
   
2. Select your desired authentication method and follow the on-screen prompts to configure your new device. Once complete, the new device should show as a separate tile on your Devices dashboard
3. A QR Code will appear in the Scan this code in Duo Mobile pop-up window.
   
4. On your smart phone, open the Duo Mobile app.
   
5. In the Duo Mobile app, tap the blue Add button
   
6. Tap the Use QR Code in the Add account window
   
7. The app will open the camera on your phone, you will need to point your camera at QR code provided in Step 6.
8. Once scanned, the Duo App will ask you to confirm the name of the account. You can leave the name as Northwestern University and tap the done button.
   
9. In the Duo Mobile app on your phone, you will see Northwestern University listed in under your accounts.
   
10. Congratulations! You successfully added your Northwestern account to the Duo Mobile app. You can confirm the app is working correctly by opening a different browser or incognito window and signing into NUValidate at https://nuvalidate.northwestern.edu or another authenticated Northwestern system.