Getting started with Multi-factor authentication

Table of Contents

Configuring Duo

There’s a continued uptick in cyber-attacks aimed at higher education, oftentimes targeting sensitive student data. Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. 

Multi-factor authentication adds a second layer of security by adding a verification step to OHIO logins, keeping your account secure even if your password is compromised. With Duo Push, you will be alerted right away if someone is trying to log in as you. 

This second factor of authentication is separate and independent from your username and password. 

Before you can start using multi-factor authentication, you will need to enroll. After you have enrolled, services that are protected with multi-factor authentication will automatically prompt you to verify your login. 

  1. Enrollment Guide 

  2. Using the Duo Login Prompt

  3. Automatically use your preferred device

  4. Have Duo remember you

Manage devices

You can add or remove a device from Duo or manage your devices by following the linked instructions below.

  1. Add or remove a device
  2. Manage your devices

  3. Use a hardware token

If you have selected a device but are not receiving notifications to authenticate it could be a network connectivity issue. Try turning your Wi-Fi off and then back on or, if you are currently using your cellular plans network, try turning airplane mode on and back off. 

  • Please ensure the date and time on your device is set to automatically update. If this is set manually, the device will not communicate with Duo's servers and receive a notification. 

  • If any of these methods don't work, please contact the Service Desk and they can send you a new activation link for your device. 

  • If your device has been lost or stolen please contact the Service Desk so they can remove your old phone and device. Once this is resolved you will be able to enroll a device in Duo.

  • If you have switched phone numbers, please contact the Service Desk and they can remove your old phone number and device which will allow you to go through the enrollment process like it is your first device. 

No device available

If you don't have access to a phone or electronic device, you can request a hardware token. A hardware token is a key chain-sized device for generating passcodes even without Internet access. 

  • Initial tokens will be provided at no cost to the user.
  • Lost, stolen, or damaged tokens will be replaced at cost by the user. 

If you would like to request a hardware token, please fill out the Token Request Form.

Note: If the hardware token is not generating a passcode, please contact the Service Desk to request a temporary passcode. If the passcodes being generated are not being accepted during login, please contact the Service Desk as the hardware token has fallen out of sync. This most likely happened by accident if the device was stored near other objects and the button was pressed too many times. 

Manage notifications

The following instructions can help you better manage how and when you are notified of log in attempts. If you receive an unexpected Duo log in request notification that means someone is trying to use your password to log in. You should press deny and change your OHIO password immediately. 

Selecting Remember me for 30 days option

If you have Duo setup to automatically send you an authentication request as soon as you log in, you will need to press cancel and then check mark the box to remember you for 30 days. At that time you can then select which authentication method you would like to use to log in. If it is not setup to automatically send you an authentication request, then you should be able to check mark the box at the bottom before selecting which method you would like to use. 


30 Day Reminder Check Box

You can adjust your settings even after selecting the Remember me for 30 days option. There are two ways to take care of this issue. 

  1. You may clear your browser cache which will force the browser to forget you have selected this option. If you need help with this, please contact the Service Desk

  1. You also can open the browser in a New Incognito/Private Window  and then log in to one of the webpages.  Once duo authentication pops up, you will be able to edit settings. You may have to cancel the authentication request first if your Duo is setup to use your preferred device automatically. 

 Duo mobile app

 You can use the Duo mobile app to manage push notifications and generate passcodes. Follow the device specific instructions below for using the Duo mobile app on your device.

  1. iOS

  2. Apple Watch

  3. Android

If you will be traveling outside of the country and want to use the Duo mobile app to authenticate, the app will still generate a passcode even without Internet access. If you work for the University, you may consider speaking with your department about getting a hardware token. If you would like to request a hardware token, please fill out the Token Request Form.

Get help from OIT

Additional resources

Was this helpful?
0 reviews


Article ID: 178
Wed 3/23/22 2:22 PM
Tue 5/24/22 11:43 AM