...
Sign up for 2FA | Adding a device | Adding a second device | Configure your device settings | Authenticate using DUO | How to generate passcodes in the DUO app
...
Sign up for 2FA
| Anchor |
|---|
...
|
To sign up for 2FA, you will need either a mobile phone, tablet, or security key (e.g. YubiKey, U2F).
If you are an employee, you can request a security key.
If you are using a mobile phone or tablet, download the DUO Mobile app
You can follow these instructions to add your first two-factor authentication method.
In your browser, go to the Two-Factor Authentication page.Scroll down and click the yellow “Get started now” button in the middle of the page.to https://2fa.uwaterloo.ca/duo/enroll
Enter your WatIAMuserid@uwaterloo.ca and your WatIAM password where prompted then click click "Sign in."
In the DUO self-service enrollment portal, click the green “Start setup” button to start adding a device to 2FA.
Select the type of device from the list provided then click click "Continue" to to begin adding it.
Select your specific type of device to navigateNavigate to the
correct instructions. (Mobileinstructions for adding your device: mobile phone,
Tablet, Landline, Security Key, Touch ID).
...
Adding a device
| Anchor |
|---|
...
|
...
|
Mobile phone | Tablet | Landline | Security Key | Touch IDSecurity key
These instructions explain how to enroll/add the various types of devices in DUO. If you have already enrolled a device you can also add another device as an authentication method by following the steps below:
...
Log into the 2FA Device Management Portal.
...
...
Click "+Add another device" and select your device type from the list.
...
Navigate to the correct instructions below for your specific type of device.
Mobile phone
...
| Anchor |
|---|
...
|
...
|
Select the country in which your phone numbers area code resides from the dropdown menu.
Enter your phone number, verify it is correct, and then check the box asking "Is this the correct number?."
Click Click "Continue" then then select your device’s operating system. (e.g iPhone, Android etc…)
Install DUO Mobile on your phone then click Click "I have Duo Mobile installed."
Activate DUO Mobile.
On your computer, in the DUO setup wizard, a barcode QR code will appear in the middle of the window.
Scan the barcode with your phone's camera.
Click the green green "Continue" button button at the bottom of the setup wizard. This button will be locked until scanning is complete.
Optionally Optionally configure your device's settings.
Your smartphone is now set up for 2FA authentication with DUO.
Tablet
...
| Anchor | ||||
|---|---|---|---|---|
|
Select your tablet's operating system (e.g iOS, Android, etc.) then click click "Continue."
Install DUO Mobile on your tablet then click Click "I have Duo Mobile installed."
Activate DUO Mobile.
In the DUO setup wizard, a barcode QR code will appear in the middle of the window.
Scan the barcode with your tablet's camera.
Click the green green "Continue" button button at the bottom of the setup wizard. This button will be locked until scanning is complete.
Optionally Optionally configure your device's settings.
Your tablet is now set up for 2FA authentication with DUO.
...
Enter your landline number and select the appropriate country.
Ensure that the extension for your phone number is correct.
Optionally configure your device's settings.
Your landline is now set up for 2FA authentication with DUO.
Security key (
...
device must support OTP for VPN authentication)
| Anchor | ||||
|---|---|---|---|---|
|
Ensure that pop-up windows are enabled on your computer.
A prompt will appear to insert and tap your security key immediately after pressing “Continue” in “Continue” in the DUO setup wizard.
This will set up your security key for 2FA authentications.
Optionally Optionally configure your device's settings.
Your security key is now set up for 2FA authentication with DUO.
...
Adding multiple devices
| Anchor |
|---|
...
Only Touch ID on macOS can be used for authentication. Touch ID on iOS and Windows fingerprint scanners cannot be used for authentications.
Ensure that pop-up windows are enabled on your computer.
You will be prompted to tap your finger on the touch bar of your computer.
Once your fingerprint has been verified, you will be able to use Touch ID for 2FA authentications.
Your touch ID is now set up for 2FA authentication with DUO.
...
|
...
|
If you have already enrolled a device, you can also add another device as an authentication method by following the steps below:
Log into the 2FA Device Management Portal.
Complete the 2FA prompt using your first device.
Click "+Add another device" and select your device type from the list.
Navigate to the correct instructions below for your specific type of device: mobile phone, tablet, security key
Configure your device settings
| Anchor |
|---|
...
|
...
|
Select a default device / 2FA method | Reactivate reactivate DUO | Change devices name | Delete a device
After you have added one or more devices to your 2FA you can configure your device settings using the 2FA Device Management Portal. The options available in this portal include:
Select a default device and two-factor method
Reactivate DUO in the case you have gotten a new device
Change your devices name
Delete your device
Select a
...
default device/2FA
...
method
| Anchor |
|---|
...
|
...
|
DUO can be configured to automatically send you an authentication request using your preferred authentication method. If the settings of your device are not configured you will be asked to choose an authentication method each time you use 2FA.
In the 2FA Device Management Portal where it says says "Default Device" select select your desired default device from the dropdown menu.
Select your desired authentication method from the dropdown menu "When I log in."
These options will vary depending on what type of device you are using.
Click the green green "Save" button button.
Reactivate DUO
| Anchor |
|---|
...
|
...
|
In the 2FA Device Management Portal click the blue blue "Device Options" button button beside the desired device.
Click the blue blue "Reactivate Duo Mobile."
Follow the correct instructions for your device. (Mobile : mobile phone, Tablet, Landline, Security Key, Touch ID) tablet, security key.
Change
...
device name
| Anchor | ||||
|---|---|---|---|---|
|
In the 2FA Device Management Portal click the blue blue "Device Options" button button beside the desired device.
Click the blue blue "Change Device Name" button.
Enter the desired device name then click the green green "Save" button button.
Delete a
...
device
| Anchor | ||||
|---|---|---|---|---|
|
In the 2FA Device Management Portal click the blue blue "Device Options" button button beside the desired device.
Click the red trash can icon.
Click Click "Remove."
This action cannot be undone. Please Please ensure you are removing the correct device.
Authenticate using DUO
| Anchor |
|---|
...
|
...
|
Campus VPN
| Anchor | ||||
|---|---|---|---|---|
|
To connect to the the campus VPN, you must enter your WatIAM credentials, followed by a second password. The second password defines the second factor you've chosen.
Second factor | Second password field |
|---|---|
Duo push notification | type: push (for multiples, push1 or push2 ...) |
Phone call | type: phone (for multiples phone1 or phone2 ...) |
Test message (SMS) | type: sms (for multiples, sms1 or sms2 ...) |
IST provided |
YubiKey | place cursor in second password field and touch token (non-IST-provided hardware auth devices must be programmed for OTP and registered with IST) |
Duo token or bypass code | type the passcode in the second password field |
ADFS (Active Directory Federation Service)
| Anchor | ||||
|---|---|---|---|---|
|
When you log in to a university site such as Learn, Portal or, Quest, you are logging in using the ADFS portal. To login, via the ADFS portal, you will need your WatIAM credentials followed by a successful 2FA authentication of your login attempt.
...
Select your preferred method of 2FA authentication. If you have pre-selected a default preferred authentication method in DUO, a 2FA request will be sent automatically.
Approve the authentication request using your preferred method.
How to generate passcodes in the DUO app
| Anchor |
|---|
...
|
...
|
You can generate a temporary, one-time passcode in the DUO mobile app to authenticate. This method works if your device is having network connection issues as well!
Open the DUO Mobile app on your mobile device.
In the DUO Mobile app, tap on the down-pointing arrow.
A six-digit code will be displayed.
Enter the six-digit passcode in the relevant authentication dialogue to authenticate your login request using a DUO passcode.
...
Issues or concerns? Please contact the Science Computing Helpdesk.