Skip to main content

Duo Two-Step Login

Utah State University has implemented a two-step login process for all USU employees.  The additional security step is an effective method to prevent unauthorized access to employee accounts, protect against cyberattacks, and safeguard sensitive University data.

New employees are directed to enroll immediately.  Former employees remain enrolled in Duo for up to 30 days after their exit date.

Get Enrolled!

First, download the Duo app onto your phone or tablet.
Then click on "enroll Smartphone/Tablet."
The enrollment process just takes minutes but once you start, it is important to complete it.
If
 would like to use a Duo key fob, click on the "Purchase Duo Key Fob" button below to find out how you can buy a Duo Hardware Token.

Enroll Smartphone/Tablet

OR

Purchase Duo Key Fob

Enrollment Example

See what it looks like to enroll (iPhone demonstration).

Answers to Frequently Asked Questions

I’m having trouble with Duo. Where can I go for help?

If you are encountering problems enrolling or using Duo, help is available.

  1. Contact your department or unit's computer technician.
  2. Contact the USU Service Desk by calling 435-797-HELP (4357).
  3. Stop by the USU Service Desk in the Janet Quinney Lawson (JQL) Building to get in-person help.
  4. Go to it.usu.edu and click on the green chat button. 
  5. Watch the demonstration video that shows a step-by-step example of how one common type of smart phone can be enrolled. The enrollment process is very similar for all devices that work with Duo.

Why are we using Duo two-step login?

Hackers are always searching for new ways to steal or trick you into giving up your password. They are good at it. If you have two-step login turned on, however, you can frustrate their plans. Even if they steal or hack your password, they can’t log in to protected services because they won’t have access to your phone, tablet, or Duo key fob.

This two-step login strategy, or two-factor authentication as it is often called, has been adopted by many universities and corporations because it has proven so effective at curtailing cyberattacks and thwarting phishers.

Duo, a leading provider of two-factor authentication services, was selected by USU for its affordability, dependability, and its user-friendly approach.

What types of devices work with Duo two-step login?

The following devices can be used with Duo to complete your two-step login process:

We recommend that you enroll at least two devices so that you'll have a backup way to authenticate should you lose or misplace your first device.
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a Duo passcode.  You can also get detailed instructions on how to get a Duo passcode.)

Who is required to use Duo two-step login?

All USU employees, including student employees, are required to utilize Duo two-step login to access many central systems such as Banner, Canvas, or Box.

What services require this two-step login process?

Duo primarily protects services that use USU's single-sign-on system, such as Banner, Canvas, and Box. If you are not presented with a Duo two-step login request, that service does not require it.

I don't have a smartphone, or a tablet, what can I do?

You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.

For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the Janet Quinney Lawson (JQL) Building.

For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.

Duo Key Fob

Duo Key Fob
We recommend that you enroll at least two devices so that you'll have a backup way to authenticate should you lose or misplace your first device.
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a Duo passcode.  You can also get detailed instructions on how to get a Duo passcode.)

What is a Duo key fob?

The preferred method for two-step login is to use a smart phone or a tablet. A Duo key fob, which is a small device that you can attach to your key chain, can also be used. If you have a Duo key fob, which is also called a "hardware token," when you go to log in, you will be expected to enter in a code that appears on your key fob to complete the login process.

You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.

For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the Janet Quinney Lawson (JQL) Building.

For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
Duo Key Fob

Duo Key Fob

I started the enrollment process and was interrupted before I finished it. What do I do now?

If you can’t log in because you haven’t completed the full set-up process, and don’t yet have a device enrolled, you can get a one-time Duo passcode by going to myid.usu.edu. Once you log in with that code you should click on “Add a new device” on the drop down menu on the left side of your screen. Duo will then walk you through the enrollment process.

You can get more detailed instructions on how to get a Duo passcode and more instructions on how to add a new device.

I am no longer a USU employee, but now I can’t log in unless I enroll in Duo. How can I correct that?

Please contact Human Resources, Career Services, or the USU unit that you once worked for to correct your employee status. Once that is cleared up, you will no longer be required to use Duo to log into USU protected services. If you have just recently left the employ of USU, Duo could remain active for as long as 30 days.

How do I set up Duo on more than one device?

Next time you go to log in, click on "Add a new device." That option is in a menu on the left side of the screen on the login page.

Image of login screen with "add new device" option circled..

If you have Duo set up to automatically send you push notifications, you'll need first to click on "Cancel" in the bottom right corner.

Image of login screen with "Cancel" circled.

After you click on cancel, wait about 30 seconds before you click on "Add a new device."

After you click on "Add a new device" link, you will need to click on the "Send Me a Push" button. When you click on "Accept" Duo will walk you through the enrollment process for that new device. 

Choose an authentication method screen with "Send Me a Push" button circled.

I don't have a cellular data plan on my phone or tablet. How can I complete two-step login?

If your device is connected to a wi-fi network, you won't need a cellular data plan to get push notifications from Duo. Once set up, the Duo app can also generate a passcode without being online, by selecting the key symbol in the Duo app. You can use that passcode to log in.

Image of Duo app key icon.

Can I use two-step login if my device cannot connect to the internet? (Air travel, as an example.)

The Duo app on your phone or tablet can still provide a code without any data connection. Click on the key symbol in your Duo app to get a six-digit code that will work to complete two-step login.

Duo App image featuring key icon.

What if I get a login notification from Duo and I haven't just tried to login?

Anytime you recieve a verification request on your phone that you didn't initiate, click on "Deny." Duo will give you two options, "It seems fraudulent" and "It was a mistake." Confirm that denying the login was not a mistake by selecting the "It seems fraudulent" option.

We then recommend you immediately change your password at myid.usu.edu. You should also notify the USU Service Desk at 435-797-HELP (4357) or send an email to servicedesk@usu.edu to report the uninitiated login request. This allows IT security professionals at USU to monitor any suspicious activity happening through your account.

Can I set it up so my computer remembers my login information or will I always need to go through the two-step process to be protected?

Duo two-step login offers you an option to remember your web browser for three days. You can enable this by selecting the checkbox that reads, "Remember me for 3 days" on the Duo login prompt in your web browser. This setting is per browser, not per device. Clearing your browser of cookies/history will reset this option and require you to do two-step login again even if the three days have not elapsed.

Login screen with "Remember me for 3 days" circled.

 

If you have automatic push set up, you must first click on cancel in the bottom right corner of the screen.

Duo login screen with "cancel" circled.Then, click on the “Remember me for 3 days” button.

Wait about 30 seconds and then click on the “Send Me a Push” button and your three days will start. When your three days expire, you’ll need to do the two-step login process again to start another three-day period.

How do I download the Duo app?

To enroll a mobile device, you need to download the Duo Mobile app on that device. To download the free app, visit your app store, on your device, and search for “Duo Mobile.” Once downloaded, install the app. You are now ready to enroll in Duo!
App Stores:
iOS devices - App Store
Andriod devices - Google Play
Windows phone – Microsoft Store

Does USU’s two-step login work with a flip phone?

No.  To use two-step login at USU requires employees to download the Duo app. If Duo doesn’t work for your phone, you can always purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.

For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the Janet Quinney Lawson (JQL) Building.

For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.

Does USU reimburse me for data usage or buy me a phone to use for Duo?

No. Duo has no impact on cell phone policies and stipends at USU.  Utah State does not provide central funding to pay for Duo key fobs but some departments and units may have their own key-fob policies. Contact your department or unit to find out their specific policy.

I left my phone, tablet, or key fob at home, or my phone or tablet battery has died, what can I do to login?

We encourage you to have more than one device set up so you have a backup plan for authentication if you misplace your device. This might include enrolling a tablet, such as an iPad, in addition to your phone.

If you don't have a second device set up you can go to myid.usu.edu to get a Duo passcode. Detailed instructions on how to get a Duo passcode are available.

I lost my phone, tablet, or Duo key fob. What should I do?

If you have lost your phone or tablet, you should immediately go to myid.usu.edu to deregister your device. Detailed instructions on how to deregister your device are available.

How can I get a Duo Duo passcode?

We encourage you to have more than one device set up so you have a backup plan for authentication if you misplace your device. This might include enrolling a tablet, such as an iPad, in addition to your phone.

If you don't have a second device set up you can go to myid.usu.edu to get a Duo passcode. Detailed instructions on how to get a Duo passcode are available.

Can I go to duo.usu.edu and enroll from my smart phone?

Yes, the process will be the same until you get to a screen that asks you to scan a QR code. At that point, you need to click on the link that says “Email me an activation link” instead. When you click on that link in your email you can complete the enrollment process.Email circled link

I’m going to be traveling abroad. How is this going to impact my Duo access?

The two-step process is the same when travelling abroad as it is at home.

Still have questions?