Overview
Logging in with Duo two-factor authentication (2FA) requires you to enter a CIT password and then use a Duo-configured device to confirm your identity.
Getting Started
To get started, contact the help desk to request enrollment (and to get a CIT password if you don't already have one). We will send you a link for setting up a Duo account.
During setup, Duo asks some questions about the device you want to use. Smartphone and tablet users are asked to download the free Duo Mobile app.
When your setup is complete, follow the instructions below to log in to the system, such as Cheyenne, the NCAR virtual private network, or others that accept Duo 2FA.
Authentication Methods
There are four ways of authenticating with Duo:
Push Notification (preferred)
The app sends a request (a "push" notification) to your phone or tablet, asking you to approve or deny the login request.
Rolling Passcode
When you can't receive a push notification, enter both your CIT password and a numerical passcode from the Duo app, separated by a comma.
Phone Callback
Enter your CIT password and the word "phone," separated by a comma, then follow instructions you receive in a phone call.
Duo/YubiKey 4
Some NCAR/UCAR staff use Duo authentication with a YubiKey 4 token. After inserting the token in your USB port, enter your CIT password and a comma, then lightly touch the gold button on your token. The examples below use the push notification method of authentication. See How to Use Append Mode for more information on other methods.
Logging in with Duo
Logging in with Duo two-factor authentication (2FA) requires you to enter a CIT password and then use a Duo-configured device to confirm your identity.
UI Steps | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
|
Duo Device Portal
The Duo Device Portal is where you can change device settings, add new devices (a new smartphone, tablet or landline), or update your preferred contact methods.
You can also choose to have Duo send you a push automatically after you enter your CIT password. Look for "When I log in" after you sign in to the portal.