Skip to main content

Two-Step Login

Utah State University is implementing a new two-step login process for all USU employees that has proven to be an effective strategy for curtailing cyberattacks at other universities and corporations. Utah State is working with Duo, a respected and tested company, to set up this approach, which is often called two-factor authentication. If you click on the enroll button below, Duo will walk you, step-by-step, through a customized set-up process created just for your device.

Get Enrolled!

First, download the Duo app onto your phone or tablet.
Then click on "enroll Smartphone/Tablet."
The enrollment process just takes minutes but once you start, it is important to complete it.
If
you are going to use a Duo key fob, click on the "Purchase Duo Key Fob" button below to find out how you can buy a key fob. If you haven’t enrolled by April 20, 2017, you will be directed to enroll automatically when logging in on that date. Please scroll down for a video demonstration and a list of frequently asked questions.

Enroll Smartphone/Tablet

OR

Purchase Duo Key Fob

Enrollment Example

See what it looks like to enroll. (iPhone demonstration.)

Answers to Frequently Asked Questions

I’m having trouble with Duo. Where can I go for help?

If you are encountering problems enrolling or utilizing Duo, there is help available.

  1. A good first step is to contact your department or unit's computer technician. If you don't know who that is, you can find out by going to mytech.usu.edu.
  2. You can also get help from the USU Service Desk by phoning 435-797-HELP (4357).
  3. You can to go the Janet Quinney Lawson (JQL) Building to get in-person help from the Service Desk or get go to it.usu.edu and click on the green chat button. 
  4. You might also want to watch the demonstration video on this website that shows a step-by-step example of how one common type of smart phone can be enrolled. The enrollment process is very similar for all devices that work with Duo.
  5. If you would like to set up specific training for your department or unit, you may do so by emailing eric.hawley@usu.edu.

Why are we using Duo two-step login?

Hackers are always searching for new ways to steal or trick you into giving up your password. They are good at it. If you have two-step login turned on, however, you can frustrate their plans. Even if they steal or hack your password, they can’t log in to protected services because they won’t have access to your phone, tablet, or Duo key fob.

This two-step login strategy, or two-factor authentication as it is often called, has been adopted by many universities and corporations because it has proven so effective at curtailing cyberattacks and thwarting phishers.

Duo, a leading provider of two-factor authentication services, was selected by USU for its affordability, dependability, and its user-friendly approach.

When can I begin using Duo and how do I enroll?

If you have a smart phone or tablet in hand that you are going to use for Duo two-step login, you can begin to protect yourself by enrolling now. When you do, Duo will guide you through a set-up process that just takes minutes.If you plan to use a key fob instead,

You can begin the enrollment processs for a Duo key fob here.

If you have not self-enrolled by April 20, 2017 on that day Duo will walk you through the enrollment process when you go to log in for the first time.

What types of devices will work with Duo two-step login?

Here is a list of the devices you can use with Duo to complete your two-step login process:

We recommend that you enroll at least two devices so that you'll have a backup way to authenticate should you lose or misplace your first device.
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a bypass code. If you'd like more detailed instructions on how to get a bypass code, please click here.

Who will be using Duo two-step login?

All USU employees, including student employees, will be required to utilize Duo two-step login. Enrollment is voluntary until April 20, 2017. After April 20, 2017 employees will be required to use two-step login in order to access many central systems such as Banner, Canvas, or Box.

What services will require this two-step login process?

Duo will primarily protect services that use USU's single-sign-on system, such as Banner, Canvas, and Box. If you are not presented with a Duo two-step login request, that service does not require it.

I don't have a smartphone, or a tablet, what can I do?

You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.

For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the Janet Quinney Lawson (JQL) Building.

For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.

Duo Key Fob

Duo Key Fob
We recommend that you enroll at least two devices so that you'll have a backup way to authenticate should you lose or misplace your first device.
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a bypass code. If you'd like more detailed instructions on how to get a bypass code, please click here.

What is a Duo key fob?

The preferred method for two-step login is to use a smart phone or a tablet. A Duo key fob, which is a small device that you can attach to your key chain, can also be used. If you have a Duo key fob, which is also called a "hardware token," when you go to log in, you will be expected to enter in a code that appears on your key fob to complete the login process.

You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.

For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the Janet Quinney Lawson (JQL) Building.

For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
Duo Key Fob

Duo Key Fob

I started the enrollment process and was interrupted before I finished it. What do I do now?

If you can’t log in because you haven’t completed the full set-up process, and don’t yet have a device enrolled, you can get a one-time bypass code by going to myid.usu.edu. Once you log in with that code you should click on “Add a new device” on the drop down menu on the left side of your screen. Duo will then walk you through the enrollment process.

If you'd like more detailed instructions on how to get a bypass code, click here, and if you'd like to get more instructions on how to add a new device, click here.

I am no longer a USU employee, but now I can’t log in unless I enroll in Duo. How can I correct that?

Please contact Human Resources, Career Services, or the USU unit that you once worked for to correct your employee status. Once that is cleared up, you will no longer be required to use Duo to log into USU protected services. If you have just recently left the employ of USU, Duo could remain active for as long as 90 days.

How do I set up Duo on more than one device?

Next time you go to log in, click on "Add a new device." That option is in a menu on the left side of the screen on the login page.

Image of login screen with "add new device" option circled..

If you have Duo set up to automatically send you push notifications, you'll need first to click on "Cancel" in the bottom right corner.

Image of login screen with "Cancel" circled.

After you click on cancel, wait about 30 seconds before you click on "Add a new device."

After you click on "Add a new device" link, you will need to click on the "Send Me a Push" button. When you click on "Accept" Duo will walk you through the enrollment process for that new device. 

Choose an authentication method screen with "Send Me a Push" button circled.

I don't have a cellular data plan on my phone or tablet. How can I complete two-step login?

If your device is connected to a wi-fi network, you won't need a cellular data plan to get push notifications from Duo. Once set up, the Duo app can also generate a passcode without being online, by selecting the key symbol in the Duo app. You can use that passcode to log in.

Image of Duo app key icon.

Can I use two-step login if my device cannot connect to the internet? (Air travel, as an example.)

The Duo app on your phone or tablet can still provide a code without any data connection. Click on the key symbol in your Duo app to get a six-digit code that will work to complete two-step login.

Duo App image featuring key icon.

What if I get a login notification from Duo and I haven't just tried to login?

Anytime you recieve a verification request on your phone that you didn't initiate, click on "Deny." Duo will give you two options, "It seems fraudulent" and "It was a mistake." Confirm that denying the login was not a mistake by selecting the "It seems fraudulent" option.

We then recommend you immediately change your password at myid.usu.edu. You should also notify the USU Service Desk at 435-797-HELP (4357) or send an email to servicedesk@usu.edu to report the uninitiated login request. This allows IT security professionals at USU to monitor any suspicious activity happening through your account.

Can I set it up so my computer remembers my login information or will I always need to go through the two-step process to be protected?

Duo two-step login offers you an option to remember your web browser for three days. You can enable this by selecting the checkbox that reads, "Remember me for 3 days" on the Duo login prompt in your web browser. This setting is per browser, not per device. Clearing your browser of cookies/history will reset this option and require you to do two-step login again even if the three days have not elapsed.

Login screen with "Remember me for 3 days" circled.

 

If you have automatic push set up, you must first click on cancel in the bottom right corner of the screen.

Duo login screen with "cancel" circled.Then, click on the “Remember me for 3 days” button.

Wait about 30 seconds and then click on the “Send Me a Push” button and your three days will start. When your three days expire, you’ll need to do the two-step login process again to start another three-day period.

How do I download the Duo app?

To enroll a mobile device, you will need to download the Duo Mobile app on that device. To download the free app, visit your app store, on your device, and search for “Duo Mobile.” Once downloaded, install the app. You are now ready to enroll in Duo!
App Stores:
iOS devices - App Store
Andriod devices - Google Play
Windows phone – Microsoft Store

Will USU’s two-step login work with a flip phone?

No, to use two-step login at USU will require employees to download the Duo app. If Duo doesn’t work for your phone, you can always purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.

For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the Janet Quinney Lawson (JQL) Building.

For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.

Will USU reimburse me for data usage or buy me a phone to use for Duo?

No. The Duo rollout will have no impact on cell phone policies and stipends at USU. Utah State will not be providing central funding to pay for Duo key fobs but some departments and units may have their own key-fob policies. If you would like to get a key fob, contact your own department or unit to find out how it plans to address this issue.

I left my phone, tablet, or key fob at home, or my phone or tablet battery has died, what can I do to login?

We encourage you to have more than one device set up so you have a backup plan for authentication if you misplace your device. This might include enrolling a tablet, such as an iPad, in addition to your phone.

If you don't have a second device set up you can go to myid.usu.edu to get a bypass code. If you'd like more detailed instructions on how to get a bypass code, please click here.

I lost my phone, tablet, or Duo key fob. What should I do?

If you have lost your phone or tablet, you should immediately go to myid.usu.edu to deregister your device. If you'd like detailed instructions on how to deregister your device, please click here.

How can I get a Duo bypass code?

We encourage you to have more than one device set up so you have a backup plan for authentication if you misplace your device. This might include enrolling a tablet, such as an iPad, in addition to your phone.

If you don't have a second device set up you can go to myid.usu.edu to get a bypass code. If you'd like more detailed instructions on how to get a bypass code, please click here.

Can I go to duo.usu.edu and enroll from my smart phone?

Yes, the process will be the same until you get to a screen that asks you to scan a QR code. At that point, you need to click on the link that says “Email me an activation link” instead. When you click on that link in your email you can complete the enrollment process.Email circled link

I’m going to be traveling abroad. How is this going to impact my Duo access?

The two-step process is the same when travelling abroad as it is at home.

Additional frequently asked questions