Information Security and IT Compliance Services

It is easy to reactivate Duo on your mobile device after an upgrade or getting a new phone. Please follow these directions to reactivate Duo on your new device.

The Duo “Push” authentication method is specific to your individual device. If you have replaced or upgraded your phone, you will need to reactivate the Duo Mobile app on your new phone.

• Go to https://passport.ucdenver.edu/CUSecure.php and log in with your username and password.
• At the Duo Authentication screen, click “My Settings & Devices” (if you are in a mobile browser, this choice will be under the “Settings” menu in the upper right)
  

• You will be prompted to authenticate. Use the “Call Me” option, which should still work unless you have changed phone numbers.

  

• Click “Device Options” next to your phone number, then click “Reactivate Duo Mobile”

  

• Follow the onscreen instructions to reactivate Duo Mobile on your new phone.

 

If these instructions do not work, or if you have changed your phone number, please call the OIT Service Desk at 303-724-4357 or online for assistance.

Multi-factor authentication (MFA) adds a strong layer of protection to your login process by challenging you to validate you are you using a phone number you register and a device recognized as yours. Using MFA makes it more difficult for an identity thief to steal your personal information or access the university’s systems. 

Duo Security will be your second proof of identification. To authenticate your login, MFA uses:

• Something you know (your user name and password)
• Something you have (your mobile device or landline phone)
• Somewhere you are (on-campus vs. off-campus)

MFA with Duo is required to access the university's VPN, remote desktops (VDI), Microsoft 365 applications, and the student and employee portals.

In addition to MFA, a more secure network access layer has been implemented requiring the use of an up-to-date browser and operating system version on devices used to access the university network. Review the table of supported devices and operating systems below for helpful information. 

MFA is required for Microsoft applications including Outlook when on-campus. OIT recommends that the Microsoft desktop or mobile device applications are installed so that you only need to authenticate about every 90 days. If you use a web browser for email, for example, you will be prompted for authentication with each new browser session.

How it works

MFA for Microsoft 365 relies on a token that is placed on your device when you access these applications while connected to the network. This means that when you connect to your email via Outlook or your OneDrive (for example) while on campus, or you connect from home using the VPN or virtual remote desktop and applications, a token that is good for up to 90 days will be placed. However, if you access Microsoft 365 browser-based applications exclusively, you will be challenged each time you connect remotely.  

Important: Authentication tokens are good for up to 90 days, but there are several factors that may cause the need to re-authenticate earlier than 90 days, even when using the Outlook client. These include changing your network password or an event that damages the token. 

OIT supports Microsoft Outlook for university email using multi-factor authentication. Faculty, students and staff are encouraged to install the Microsoft Outlook app on all your computing devices including mobile phones, tablets, laptops and desktops. 

Included with the MFA for Microsoft 365 project is a backend security upgrade that requires a more modern browser and operating system. If you have an older device, browser, and/or operating system, you may need to upgrade to access university systems. Refer to the compatibility table on the MFA and Microsoft 365 webpage for more information.

The team will make their best effort to help with troubleshooting issues with native clients, but may not be able to assist. As a reminder, the entire suite of Microsoft applications - including Outlook - is available to download on up to 5 PCs or Macs, and your mobile devices.

Authenticating using the Duo app on your smart phone is the easiest way to authenticate; however, there are other methods by which you can authenticate, you may:

• Register a landline - this can be your home phone, a family member’s phone, or the phone in your hotel room when travel reopens. There is no limit to how many landlines can be registered for Duo to call to authenticate.

• Register your tablet (iPad or Android) to authenticate and Duo can utilize the pass code or send a push option without having to use a mobile number. 

No, Duo does not offer a computer application for authentication. You need to use a separate device to verify your identity - either a smart phone, tablet, or landline phone. Duo Mobile is available for Apple, Android, and Windows devices. 

You can make changes to the information in Duo at any time including adding additional devices and phone numbers. To access your Duo account, go to: https://passport.ucdenver.edu/CUSecure.php

1. Type in your university username and password.
2. Click on My Settings & Devices.
3. You can make changes from this window including managing your preferred authentication method.

A Duo passcode lets you log into your account when your device is without an internet connection - similar to text messaging. You can select the Passcode option on the Duo Authentication page. Be sure you clicked "Allow notifications" during the installation process. You will have five minutes to enter the passcode texted to your phone; once the passcode is entered, you can log in. 

Yes, Duo can be installed once and used to manage multiple accounts. You will need to complete the registration for the CU Secure account. After you register, you’ll see the additional CU Secure profile displayed on your Duo app.

Your personal protected data and password are not accessed by Duo Security. This second factor of authentication is separate from your username and password.

More information is available on the Duo Mobile Privacy information page at: https://help.duo.com/s/article/4683?language=en_US.