Duo multi-factor authentication - Enroll and set up mobile app

Use these instructions to enroll and set up the Duo multi-factor authentication mobile app. Starting in January 2024, you will be prompted to authenticate with Duo when logging in to Buff Portal or MyCUInfo. Looking for other instructions? Visit OIT's Duo phone number or security key setup tutorials.

Please note: If you receive an error message on an iOS device when trying to authenticate, it may be due to an older version of iOS installed. To successfully enroll, please install the app from the app store first or update your device to the newest iOS.

Layout:
one column
two columns

Step

Go to the Duo multi-factor authentication enrollment website (https://duo.colorado.edu/) and sign in with your IdentiKey username and password.

Step

If you have already enrolled in Duo, you will be prompted to authenticate and taken to a screen similar to the one pictured. Select return to the Duo device registration and management page to verify your information is correct (skip to the end of this tutorial to see a screenshot of management options).

Step

Click Start setup and select your authentication method:

  • Duo Mobile (recommended): Get a push notification from an app on your smartphone or smart watch. 
  • Security key: Use a Yubi Key to verify your identity. 
  • Phone number: Receive a phone call or text message with a code that you will need to enter.

If you have a smartphone, OIT recommends using the Duo mobile app for the best experience, but you can also enroll a landline telephone, a security key, or iOS/Android tablets. You may want to enroll more than one device for ease of access in case you lose or upgrade a device. 

Step

After choosing Duo Mobile, you will be prompted to enter your phone number. 

Step

Next, you will need to install Duo Mobile from the Apple app store or Google play store. Follow the platform-specific instructions on the screen to install Duo Mobile. 

After installing the app, return to the enrollment window and click Next. 

Step

In the Duo Mobile app, select Add + to add a new account then Use a QR code. 

The app's built-in QR code scanner will open and you can scan the QR code on the screen to activate the app.

Step

A screen should be displayed confirming the device is enrolled.

Step

After initial set up, when you're prompted to authenticate, click Other options on the authentication screen to change your preferred authentication option or verify the settings of a previously enrolled device. 

Step

Depending on the devices you've set up, you will have several options for authentication. To verify or change authentication methods, click Manage devices (you will be prompted to authenticate before you can change any settings). 

Step

The devices page will load, allowing you to add a new device or edit a device that's already set up. Click back to login or close the browser to exit.