DUO - Authentication
If you leave the “When I log in:” setting as default, you will be prompted for authentication method every sign-in, which is recommended for maximum device flexibility.
Please SELECT the method you want to use for second-factor authentication.
**Review the authentication methods described earlier in this document to decide which you prefer to use based on your device’s ability and personal preference.
DUO PUSH |Send Me a Push|:
If you selected “Automatically send this device a DUO Push” in your Settings, or select Send Me a Push at the prompt, you will see this screen.
**Be sure to have your registered device near you before signing-in. You only have 60 seconds to respond to the DUO Push notification before it times out.
The DUO Push notification looks like these illustrations. Tap the notification when you see it.
**You may want to unlock your phone ahead of time to make this easier**
If the notification has already gone away (between 3 and 10 seconds usually) you can access it by swiping down from the top of your phone, the way you normally access previous notifications OR by opening the DUO Mobile app.
Apple Lock Screen Notification
Apple Standard Notification
Android Standard Notification
On Android, if you tap right where it says “Tap To View Actions”, when you tap the notification, you will be allowed to satisfy the prompt right from the notification.
Select APPROVE to allow the authentication
Select DENY to not allow the authentication
This is what the DUO notification symbol is for phones which display notification symbols on the top menu bar.
If you cannot find the notification, simply open the DUO Mobile app, or if you happen to have DUO Mobile open right when you select “Send Me a Push”, you will see this prompt at the top of the app.
Tap the Green bar to open the Request.
When you tap the DUO Push notification on Apple (or tap on the right side of the notification on Android), you are taken immediately to the larger DUO Push – Login Request screen.
***IMPORTANT***
Only Approve authentications that are for YOUR StateID (which is displayed underneath the person icon) and which YOU initiated.
*If you receive a DUO Push Notification and HAVE NOT initiated the push yourself in the last 60 seconds or so, ALWAYS DENY THE REQUEST. (use the time listed to determine when the notification was sent)
*You will be asked whether you are DENYING because it was a mistake, or because it may be fraud. Select the option that applies.
?
**IF YOU DO NOT RECEIVE the DUO PUSH AT ALL**
· This is a normal occurrence when your registered device is on some types of wifi
· Do not contact the SCO ServiceDesk
The Enterprise Dashboard DUO screen will display this message after 60 seconds.
Be Aware: You only have Three (3) Attempts before DUO Locks your account for 2 hours.
SCO Recommends you try the SEND ME A PUSH one more time, and if that also times out, select one of the other two methods, either CALL ME or ENTER A PASSCODE.
SMS or DUO Mobile PASSCODE
|Send Me a Passcode|
If you selected “Enter a Passcode” at the prompt, you will see this screen.
If you have the DUO Mobile app on your smartphone and select this option, you will NOT receive an SMS Text. Rather, you must open your DUO Mobile app to obtain the passcode, illustrated below.
**NOTE** If you have the DUO Mobile app, only use this option if your data plan is inoperable or you cannot receive a DUO Push. If this is not the case, we recommend using the “Send Me a Push” option if it is at all possible; it is far more secure.
Open the DUO Mobile App, find the tile that states DUO-Protected: Idaho State Controllers Office, and tap the down arrow on the right side. You will then see a 6-digit passcode.
Enter this passcode in the website prompt, and select LOG IN.
If you DO NOT have the DUO Mobile app on your phone, or have a feature phone (non-Smart phone), you need to select “Text me new codes”, and then will receive an SMS text from DUO.
The text on a feature phone looks similar to this. The text will come from the short-code number that represents the State of Idaho DUO account, which is 386-732. **THIS number is not the passcode.**
The text heading for a sign-in authentication will say: SMS passcodes (will expire in 7 minutes):
Enter the passcode you then see in the empty field that says (ex. 867539) on the sign-in and select LOG IN.
***IMPORTANT*** If you receive this SMS Text and have not pressed the DUO Enter a Passcode button in the last 60 seconds or so, please ignore the text.
The text on a smart phone will come from the short-code number that represents the State of Idaho DUO account, which is 386732. **THIS number is not the passcode.**
The text heading for a sign-in authentication will say: Duo login code:
Phone Call |Call Me|
The call you receive will be an automated voice; this is normal.
It will say the following:
“Welcome to DUO. If you were not expecting this call, please press 9 (Nine) to report fraud, otherwise, press 1 (One) on your phone to login.”
On a smartphone, you may need to tap the proper option to show your keypad, then press 1 to authorize this authentication.
The call will be from 208-334-3100, and if you redial this number, you will reach the State of Idaho Controllers Office main line.
***IMPORTANT*** If you receive this phone call and have not pressed a DUO Call Me button in the last 20 seconds or so, press 9 (Nine) to report fraud.
To access Settings and Devices screen again, select the Settings button, then select My Settings & Devices.
You may also Add a new device right from this screen.
***SCO recommends that users add a second device for maximum authentication flexibility. If you register your mobile phone, but then lose that phone or don’t have it on your person when you need it, it may help to have another registered device, such as your office extention, registered as a “Landline”.
**There is no limit to registered devices