Main menu (IT)

Duo Multi-Factor Authentication

CSUN uses Duo multi-factor authentication for any application that stores or processes Level 1 Confidential information. Adding a second verification step is a security best practice that enhances the account and data security. The users will verify their identity using their CSUN credentials and an additional device such as a mobile phone or landline. When using the Duo multi-factor authentication, these are the steps:

     Step 1: Enter your username and password into the application as you normally do.

     Step 2: You will see a new screen. To complete the login select “Send a Push” or “Call Me” or “Enter a Passcode”.

     Access granted!

What does Send a Push, Call Me and Enter a Passcode mean?

Send a Push: you will be notified on your phone to either approve or deny the log in.

Call me: you will receive a phone call and must press a key to continue the log in.

Enter a Passcode: you will be prompted to enter a six digit passcode from the Duo app.

How do I set up multi-factor authentication?

Multi-factor authentication is currently enabled for selected applications. Application owners will contact you regarding the enrollment.

What devices support multi-factor authentication?

The following devices are supported:

  • iPhone, iPad, iPod
  • Android (phone and tablet)
  • Blackberry
  • Windows Phone 7
  • Windows Mobile
  • Landlines

Do I have to use my mobile device for authentication?

Although Duo Push on a mobile phone is recommended, devices like a campus phone extension is also supported.

Can I use multi-factor authentication without cellular or Wi-Fi service?

Yes. You can open the DUO Mobile app and press the key button to obtain the six digit code.

I forgot my phone, what do I do?

Contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

I lost my phone, what do I do?

Contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

I changed my phone number, what do I do?

Contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

What services are supported by multi-factor authentication?

Currently, DocuSign, Confidential Box and Common Financial Services (CFS) authenticate using a multi-factor authentication.

Will I be able to use multi-factor authentication while traveling?

Yes. If internet services are not available on travel, you can open the DUO Mobile app and press the key button to obtain the six digit code. 

How do I set up the Duo Push app on my phone?

To set up Duo Push visit the links on the right side of this webpage. Once the Duo mobile app is downloaded, the Duo campus administrator will send a text to activate the app. If you do not receive an activation text, please contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

Is there a limit on the number of devices I can add to setup multi-factor authentication?

When you set up Duo through the Duo campus administrator, you have the option to add multiple devices with multi-factor authentication. We recommend a maximum of two devices.

What if I receive an unexpected login alert?

Contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

My mobile app stopped receiving the push messages. What should I do?

You may have trouble receiving push requests if there are connection issues between your phone and the Duo service. Many phones have trouble determining whether to use the Wi-Fi or cellular data. Due to this reason there may be an issue relating to the push requests. In this case simply turning the phone to airplane mode and back to normal operating mode often resolves issue.

Check the date and time on your phone, and make sure they are correct. Avoid setting manual date and time on your phone. Instead, set it up to sync with your phone service network.

Should neither of these actions help, see the Duo Knowledge Base for additional iOS and Android troubleshooting.

If you cannot get Duo push working on your own, you can log in with a passcode generated by the Duo Mobile app and send a new activation link to your phone. See the My Settings & Devices guide for instructions.

If you've tried the suggestions here but can't get Duo Push working or reactivate your device yourself, contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

What if I don't want to use multi-factor authentication?

Multi-factor authentication is required for accessing Confidential Box and Common Financial Applications (CFS).

How do I reactivate my Duo Mobile app?

Contact the IT Help Center by phone (818-677-1400), online at (http://techsupport.csun.edu) or in person in (Oviatt Library, First Floor, Learning Commons).

Will DUO work if I am travelling internationally?

If you travel internationally Duo authentication can work without cellular service or a Wi-Fi connection.

  1. Smartphone/Tablet – Even with cellular service disabled or without a Wi-Fi connection, you may use the Duo Mobile app to generate a passcode that you can use to authentication. Simply choose the Enter a Passcode option when you get the Duo authentication prompt. To generate the passcode, open the Duo Mobile app on your phone or tablet and tap the button with the KEY symbol.
  2. Hardware token – if you don’t have a smartphone/tablet and you travel internationally often, you may want to get a hardware token by contacting the Information Security Office. Once you have the token, choose the Enter a Passcode option when you get the Duo authentication prompt and then enter the passcode that shows on the hardware token.
  3. ByPass Code – If you won’t have a smartphone/tablet and a hardware token is not an option, it is possible to get a bypass code that you can use for Duo authentication for the duration of your trip. Contact the IT Help Center to request this option. Then, choose the Enter a Passcode option when you get the Duo authentication prompt and enter the bypass code that you were given.
  4. Normal options – If you have cellular service or a Wi-Fi connection, then you can simply use whatever authentication technique you normally use. The push, passcode, and phone options all work overseas. You can even add an international phone number as one of your authentication options.

What If I am travelling to a country with Export Control Restrictions?

The Duo Mobile app and hardware tokens are encryption items that are subject to export control regulations. This means that travel to Cuba, Iran, North Korea, Sudan, Syria, and the Crimea region of Ukraine will not allow you to use the DUO mobile app or hardware token. In this case, we strongly urge you not to log into applications that require DUO. If you are travelling to these countries and must use DUO, please contact the IT Help Center for a bypass code.