Enrollment for Two Factor Authentication (2FA)

Both staff and student accounts are required to have 2FA when you access to secure web services. You will be guided to enroll for 2FA when you access to any protected web applications.

For students whose network account has not yet been enforced with 2FA during the course registration period, you may follow the steps below to register your device:

  1. Log on the Duo Self-Service Portal using your ITSC Network account and password:
    Duo Self-Service Portal

  2. Click Start setup to begin enrolling your device

  3. Choose type of device you are using - Mobile phone is recommended

  4. Type Your Phone Number

  5. Choose your device's operating system and click Continue

  6. Click I have Duo Mobile Installed (please install the Duo Mobile App if you have not done so)

    Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Follow the platform-specific instructions on the screen or click here to install Duo Mobile for your device. After installing the app, return to the enrollment window and click I have Duo Mobile installed.

  7. Activate Duo Mobile

    On your smartphone, activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. If you are browsing with your mobile device, select "have an activation link emailed to you instead" and enter your email address. Email will be sent to your email address and you can use that link to activate your Duo Mobile without the need to scan the QR code.

    Follow the platform specific instructions of your device:

    1. Open Duo Mobile
    2. Tap the "+" button (or Add Account)
    3. Scan the barcode on the screen

    The "Continue" button is clickable after you scan the barcode successfully.

  8. Congratulations. Your device is ready to approve Duo authentication requests and you can close your web browser. You may select which device is your Default Device if you have multiple devices. Please do not un-install the Duo Mobile App as you will need to repeat the above steps once more.
  9. Try out CAS authentication with 2FA to verify your enrollment. Or, you may sign in to Outlook Web App (for Student) / Outlook Web App (for Staff) using 2FA.

After Enrolled

After you have enrolled your device, you may just leave the Duo Self-Service Portal by closing your web browser.

Students are advised to update your External Email Contact  for Self Service Account Management tools such as Forgot Password, etc.

Please note that the next time you enter the Duo Self-Service Portal or other applications supporting 2FA, you will need to perform the following steps:

  1. Enter your email address and password as usual

  2. Use your mobile phone, tablet to verify your identity
    1. A Duo dialog prompts you to choose the way you would like to provide the second authentication factor. You are recommended to choose Send me a push (with a 1-minute time-out period).
    2. Launch the Duo Mobile app with your smartphone
    3. Tap to respond the request
    4. Tap APPROVE to access the secured service
    5. You are securely logged in.

Note: If your mobile support Duo notification, you may just response to the Duo notification by tapping APPROVE and then CONFIRM.

In case you cannot receive PUSH

Lanuch the Duo mobile app manually and approve the sign in.

In case your mobile device has no network connection, you can always obtain a one-time passcode from your Duo Mobile App and select Enter a Passcode:

  1. Select Options
  2. Select Duo Mobile Passcode
  3. Launch your Duo Mobile app in your mobile device
  4. Tap on the key to obtain a 6-digits passcode
  5. Enter the passcode and click Log In
  6. You are securely logged in.