Two-Factor Authentication Enrollment Guide

APIC 2FA (DUO) self-enrollment process makes it easy to register your phone or tablet and activate the Duo Mobile application so you can receive Duo requests via push notification and tap to approve and login.

Enrolling Your Phone or Tablet in Duo

Duo prompts you to enroll the first time you log into into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. Alternatively, you might receive an email from APIC IT Team with an enrollment link.

START HERE

Before you begin the enrollment process

1. Visit Office365 login page: https://login.microsoftonline.com/

2. Use your APIC username and password to sign-in.

Step One: Welcome Screen

Click Start setup to begin enrolling your device.

Step Two: Choose Your Authentication Device Type

Select the type of device you'd like to enroll and click Continue. We recommend using a smartphone for the best experience, but you can also enroll a landline telephone or iOS/Android tablets.

Step Three: Type Your Phone Number

Select your country from the drop-down list and type your phone number. Use the number of your smartphone, landline, or cell phone that you'll have with you when you're logging in to a Duo-protected service. You can enter an extension if you chose "Landline" in the previous step.

Double-check that you entered it correctly, check the box, and click Continue.

If you're enrolling a tablet you aren't prompted to enter a phone number.

Step Four: Choose Platform

Choose your device's operating system and click Continue.

Step Five: Install Duo Mobile

Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Without it you'll still be able to log in using a phone call or text message, but for the best experience, we recommend that you use Duo Mobile.

Follow the platform-specific instructions on the screen to install Duo Mobile. After installing our app return to the enrollment window and click I have Duo Mobile installed.

Step Six: Activate Duo Mobile

Activating the app links it to your account so you can use it for authentication.

On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the platform-specific instructions for your device:

The "Continue" button is clickable after you scan the barcode successfully.

Can't scan the barcode? Click Or, have an activation link emailed to you instead. and follow the instructions.

Step Seven: Configure Device Options (optional)

You can use Device Options to give your phone a more descriptive name, or you can click Add another device to start the enrollment process again and add a second phone or another authenticator.

If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" or "Automatically call this device" and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

Click Continue to login to proceed to the Duo Prompt.

Congratulations!

Your device is ready to approve Duo push authentication requests. Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.