Default action for Two-Factor Authentication (2FA) approval

1. ● After entered username, password and clicked Connect, the default second authentication factor notification will send to the default device (usually is the first registered device) for approval.
   ● To check or change the default device, please access Duo self-service portal
   

2. If you cannot receive the notification pop-up on your device, you should open the Duo Mobile app manually.
   

3. To continuous, pressing Approve is required
   

Alternative approval method for no Internet access

1. In case, your default device is no Internet access, you can generate a passcode on Duo Mobile app

2. To generate a passcode, open the Duo Mobile app manually

3. Tap the indicator next to HKUST in Duo Mobile
   

4. ● Enter username as usual, and enter the password following the format as <yourpassword>,<passcode>
   ● e.g. your personal password is thisispassword , the generated passcode is 308159 . You should enter thisispassword,308159 in the password field during logon
   ● Note: do not forget the comma between two words
   

Alternative approval method for multiple devices

1. If you have multiple registered devices and want to send the second authentication factor notification to another registered device, you should enter the password as following format.

2. ● Enter username as usual, and enter the password following the format as <yourpassword>,push<x>, where <x> is the registered device order showing in Duo self-service portal
   ● e.g. your personal password is thisispassword , wanting to send the notification to the registered device in order 2 . You should enter thisispassword,push2 in the password field during logon
   ● Note: do not forget the comma between two words