Duo Being Replaced by Microsoft MFA at USU
Duo Two-Step Login
Utah State University has implemented a two-step login process for all USU employees and emeriti. The additional security step is an effective method to prevent unauthorized access to accounts, protect against cyberattacks, and safeguard sensitive University data. New employees are directed to enroll immediately. Former employees remain enrolled in Duo for up to 30 days after their exit date.
Get Enrolled!
First, download the Duo app onto your phone or tablet.
Then click on the "enroll Smartphone/Tablet" button below.
The enrollment process just takes minutes but once you start, it is important to complete it.
Enroll Smartphone/TabletOR
If you would like to use a Duo key fob, click on the "Purchase Duo Key Fob" button below to find out how you can buy a Duo Hardware Token.
Purchase Duo Key FobEnrollment Example
See what it looks like to enroll (iPhone demonstration).
Answers to Frequently Asked Questions
If you are encountering problems enrolling or using Duo, help is available.
- Contact your department or unit's computer technician.
- Contact the USU Service Desk by calling 435-797-HELP (4357).
- Stop by the USU Service Desk in the IT Services Building, north of Aggie Ice Cream, to get in-person help.
- Click on the green Live Chat button on this page.
- Watch the demonstration video that shows a step-by-step example of how one common type of smart phone can be enrolled. The enrollment process is very similar for all devices that work with Duo.
Hackers are always searching for new ways to steal or trick you into giving up your password. They are good at it. If you have two-step login turned on, however, you can frustrate their plans. Even if they steal or hack your password, they can’t log in to protected services because they won’t have access to your phone, tablet, or Duo key fob.
This two-step login strategy, or two-factor authentication as it is often called, has been adopted by many universities and corporations because it has proven so effective at curtailing cyberattacks and thwarting phishers.
Duo, a leading provider of two-factor authentication services, was selected by USU for its affordability, dependability, and its user-friendly approach.
This two-step login strategy, or two-factor authentication as it is often called, has been adopted by many universities and corporations because it has proven so effective at curtailing cyberattacks and thwarting phishers.
Duo, a leading provider of two-factor authentication services, was selected by USU for its affordability, dependability, and its user-friendly approach.
The following devices can be used with Duo to complete your two-step login process:
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a Duo passcode. You can also get detailed instructions on how to get a Duo passcode.)
- Android phones and tablets
- iPhones and iPads
- Apple Watches
- Duo Key Fobs also called "Hardware Tokens"
- Windows Mobile
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a Duo passcode. You can also get detailed instructions on how to get a Duo passcode.)
All USU employees, including student employees, are required to utilize Duo two-step login to access many central systems such as Banner, Canvas, or Box.
Duo primarily protects services that use USU's single-sign-on system, such as Banner, Canvas, and Box. If you are not presented with a Duo two-step login request, that service does not require it.
You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.
For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the IT Services Building.
For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
Duo Key Fob
We recommend that you enroll at least two devices so that you'll have a backup way to authenticate should you lose or misplace your first device.
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a Duo passcode. You can also get detailed instructions on how to get a Duo passcode.)
For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the IT Services Building.
For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
We recommend that you enroll at least two devices so that you'll have a backup way to authenticate should you lose or misplace your first device.
(However, if you leave your authentication devices at home, you can go to myid.usu.edu to get a Duo passcode. You can also get detailed instructions on how to get a Duo passcode.)
The preferred method for two-step login is to use a smart phone or a tablet. A Duo key fob, which is a small device that you can attach to your key chain, can also be used. If you have a Duo key fob, which is also called a "hardware token," when you go to log in, you will be expected to enter in a code that appears on your key fob to complete the login process.
You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.
For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the IT Services Building.
For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
Duo Key Fob
You may purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.
For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the IT Services Building.
For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
If you can’t log in because you haven’t completed the full set-up process, and don’t yet have a device enrolled, you can get a one-time Duo passcode by going to myid.usu.edu. Once you log in with that code you should click on “Add a new device” on the drop down menu on the left side of your screen. Duo will then walk you through the enrollment process.
You can get more detailed instructions on how to get a Duo passcode and more instructions on how to add a new device.
Please contact Human Resources or the USU unit that you once worked for to correct your employee status. Once that is cleared up, you will no longer be required to use Duo to log into USU protected services. If you have just recently left the employ of USU, Duo could remain active for as long as 30 days.
Next time you go to log in, click on "Add a new device." That option is in a menu on the left side of the screen on the login page.
If you have Duo set up to automatically send you push notifications, you'll need first to click on "Cancel" in the bottom right corner.
After you click on cancel, wait about 30 seconds before you click on "Add a new device."
After you click on "Add a new device" link, you will need to click on the "Send Me a Push" button. When you click on "Accept" Duo will walk you through the enrollment process for that new device.
If you have Duo set up to automatically send you push notifications, you'll need first to click on "Cancel" in the bottom right corner.
After you click on cancel, wait about 30 seconds before you click on "Add a new device."
After you click on "Add a new device" link, you will need to click on the "Send Me a Push" button. When you click on "Accept" Duo will walk you through the enrollment process for that new device.
If your device is connected to a wi-fi network, you won't need a cellular data plan to get push notifications from Duo. Once set up, the Duo app can also generate a passcode without being online, by selecting the key symbol in the Duo app. You can use that passcode to log in.
The Duo app on your phone or tablet can still provide a code without any data connection. Click on the key symbol in your Duo app to get a six-digit code that will work to complete two-step login.
Anytime you recieve a verification request on your phone that you didn't initiate, click on "Deny." Duo will give you two options, "It seems fraudulent" and "It was a mistake." Confirm that denying the login was not a mistake by selecting the "It seems fraudulent" option.
We then recommend you immediately change your password at myid.usu.edu. You should also notify the USU Service Desk at 435-797-HELP (4357) or send an email to servicedesk@usu.edu to report the uninitiated login request. This allows IT security professionals at USU to monitor any suspicious activity happening through your account.
We then recommend you immediately change your password at myid.usu.edu. You should also notify the USU Service Desk at 435-797-HELP (4357) or send an email to servicedesk@usu.edu to report the uninitiated login request. This allows IT security professionals at USU to monitor any suspicious activity happening through your account.
Duo two-step login offers you an option to remember your web browser for three days. You can enable this by selecting the checkbox that reads, "Remember me for 3 days" on the Duo login prompt in your web browser. This setting is per browser, not per device. Clearing your browser of cookies/history will reset this option and require you to do two-step login again even if the three days have not elapsed.
If you have automatic push set up, you must first click on cancel in the bottom right corner of the screen. 
Then, click on the “Remember me for 3 days” button.
Wait about 30 seconds and then click on the “Send Me a Push” button and your three days will start. When your three days expire, you’ll need to do the two-step login process again to start another three-day period.
To enroll a mobile device, you need to download the Duo Mobile app on that device. To download the free app, visit your app store, on your device, and search for “Duo Mobile.” Once downloaded, install the app. You are now ready to enroll in Duo!
App Stores:
iOS devices - App Store
Andriod devices - Google Play
Windows phone – Microsoft Store
App Stores:
iOS devices - App Store
Andriod devices - Google Play
Windows phone – Microsoft Store
No. To use two-step login at USU requires employees to download the Duo app. If Duo doesn’t work for your phone, you can always purchase a Duo key fob by visiting the IT Service Catalog and submitting a Duo Hardware Token Request. The one-time cost for the token is $23.00.
For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the IT Services Building.
For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
For those on the Logan campus, the token can be picked up, in person, with a picture ID, at the Service Desk located in the IT Services Building.
For those not located in Logan, the ordering process will instruct you on the method for picking up or receiving your device.
No. Duo has no impact on cell phone policies and stipends at USU. Utah State does not provide central funding to pay for Duo key fobs but some departments and units may have their own key-fob policies. Contact your department or unit to find out their specific policy.
We encourage you to have more than one device set up so you have a backup plan for authentication if you misplace your device. This might include enrolling a tablet, such as an iPad, in addition to your phone.
If you don't have a second device set up you can go to myid.usu.edu to get a Duo passcode. Detailed instructions on how to get a Duo passcode are available.
If you don't have a second device set up you can go to myid.usu.edu to get a Duo passcode. Detailed instructions on how to get a Duo passcode are available.
If you have lost your phone or tablet, you should immediately go to myid.usu.edu to deregister your device. Detailed instructions on how to deregister your device are available.
If you are replacing a mobile device where the phone number stays the same, you may download the Duo app on the new device and visit myid.usu.edu to get a Duo passcode. Detailed instructions on activating your new device.
We encourage you to have more than one device set up so you have a backup plan for authentication if you misplace your device. This might include enrolling a tablet, such as an iPad, in addition to your phone.
If you don't have a second device set up you can go to myid.usu.edu to get a Duo passcode. Detailed instructions on how to get a Duo passcode are available.
If you don't have a second device set up you can go to myid.usu.edu to get a Duo passcode. Detailed instructions on how to get a Duo passcode are available.
Yes, the process will be the same until you get to a screen that asks you to scan a QR code. At that point, you need to click on the link that says “Email me an activation link” instead. When you click on that link in your email you can complete the enrollment process.
The two-step process is the same when travelling abroad as it is at home.