...
Click the Connect button to enter your VPN credentials.
...
Sign in using your UW user name and password. The user name should not include “nexus\” or “@uwaterloo.ca”.
The “Second Password” field is for DUO 2FA authentication. In this field, enter one of the following:
the word ‘push’ to receive a push notification on your phone
the passcode from your DUO FOB, the DUO Mobile app, or provided by an administrator
Once the VPN is connected, you will be directed back to the Windows sign-in screen. Sign in to Windows as you normally would.
...