Duo Multi-Factor Authentication

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. 

Two-factor or multi-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you. 

This second factor of authentication is separate and independent from your username and password — Duo never sees your password. 

Duo's remembered devices feature is similar to the "remember my computer" or "keep me logged in" options users are accustomed to seeing during primary authentication on many websites. With the remembered devices feature enabled, the user is offered a “Remember me for ...” checkbox during login. When users check this box, they aren't challenged for secondary authentication again when they log in to that application from that device for the specified period of time.

Multi-factor authentication is currently enabled for selected applications. Review the CSUN MFA Self-Enrollment Guide for Staff and Faculty (PDF) or the CSUN MFA Self-Enrollment Guide for Students (PDF) for step-by-step instructions. 

Send a Push: you will be notified on your phone to either approve or deny the log in. This is the easiest method. 

Call me: you will receive a phone call and must press a key to continue the log in.

Enter a Passcode: you will be prompted to enter a six digit passcode from the Duo app.

The following devices are supported:

• iPhone, iPad, iPod
• Android (phone and tablet)
• Blackberry
• Windows Phone 7
• Windows Mobile
• Landlines
• Hardware tokens (MFA HOTP, only available from the Library walk-in center)

Duo Push on a mobile phone is the easiest to use. However, devices like a campus phone extension is also supported. Note: whatever device you select should be a device that you have immediate access to so you can verify your identity as needed. 

Yes. You can open the DUO Mobile app and press the key button to obtain the six digit code.

Contact the IT Help Center by phone (818-677-1400), online at (https://csun.topdesk.net/) or in person in (The University Library, First Floor, Learning Commons).

Contact the IT Help Center by phone (818-677-1400), online at (https://csun.topdesk.net/) or in person in (The University Library, First Floor, Learning Commons).

Currently, DocuSign, Confidential Box, Common Financial Services (CFS) and Palo Alto GlobalProtect authenticate using a multi-factor authentication. Users who have access to Level 1 data, will also be required to use MFA when logging in to the myNorthridge portal. 

When signing into GlobalProtect VPN please be aware that your work station will not notify you to check for a phone call or a push-notification. For this reason please make sure to have your device in hand and ready to answer. For more information on GlobalProtect VPN refer to the Virtual Private Network website. 

Yes. If internet services are not available on travel, you can open the Duo Mobile app and press the key button to obtain the six digit code. 

To set up Duo Push visit Authenticate with Duo Push on iPhone or Authenticate Duo Push on Android. 

Once the Duo mobile app is downloaded, the Duo campus administrator will send a text to activate the app. If you do not receive an activation text, please contact the IT Help Center by phone (818-677-1400), online at (https://csun.topdesk.net/) or in person in (The University Library, First Floor, Learning Commons).

When you set up Duo through the Duo campus administrator, you have the option to add a maximum of 10 devices. We recommend a minimum of two devices.

If you receive an unexpected log in alert, you should select "Deny" and indicate whether "It seemed fraudulent" or "It was a mistake".

If you believe your account has been compromised (credentials stolen), contact the IT Help Center by phone (818-677-1400), online at (https://csun.topdesk.net/) or in person in (The University Library, First Floor, Learning Commons).

You may have trouble receiving push requests if there are connection issues between your phone and the Duo service. Many phones have trouble determining whether to use the Wi-Fi or cellular data. Due to this reason there may be an issue relating to the push requests. In this case simply turning the phone to airplane mode and back to normal operating mode often resolves issue.

Check the date and time on your phone, and make sure they are correct. Avoid setting manual date and time on your phone. Instead, set it up to sync with your phone service network.

Should neither of these actions help, see the Duo Knowledge Base for additional iOS and Android troubleshooting.

If you cannot get Duo push working on your own, you can log in with a passcode generated by the Duo Mobile app and send a new activation link to your phone. See the My Settings & Devices guide for instructions.

If you've tried the suggestions here but can't get Duo Push working or reactivate your device yourself, contact the IT Help Center by phone (818-677-1400), online at (https://csun.topdesk.net/) or in person in (The University Library, First Floor, Learning Commons). 

Multi-factor authentication is required for accessing any CSUN application.

You can reactivate it if you are already enrolled. In Duo, go to "Add a new device", authenticate before making changes, select the device you want to re-enroll in Duo Mobile, and select "Reactivate Duo Mobile".

If you need assistance, contact the IT Help Center by phone (818-677-1400), online at (https://csun.topdesk.net/) or in person in (The University Library, First Floor, Learning Commons).

If you travel internationally Duo authentication can work without cellular service or a Wi-Fi connection.

1. Smartphone/Tablet – Even with cellular service disabled or without a Wi-Fi connection, you may use the Duo Mobile app to generate a passcode that you can use to authentication. Simply choose the Enter a Passcode option when you get the Duo authentication prompt. To generate the passcode, open the Duo Mobile app on your phone or tablet and tap the button with the KEY symbol.
2. Hardware token – if you don’t have a smartphone/tablet and you travel internationally often, you may want to get a hardware token (MFA HOTP, only available from the Library walk-in center)
   . Once you have the token, choose the Enter a Passcode option when you get the Duo authentication prompt and then enter the passcode that shows on the hardware token.
3. ByPass Code – If you won’t have a smartphone/tablet and a hardware token is not an option, it is possible to get a bypass code that you can use for Duo authentication for the duration of your trip. Contact the IT Help Center to request this option. Then, choose the Enter a Passcode option when you get the Duo authentication prompt and enter the bypass code that you were given.
4. Normal options – If you have cellular service or a Wi-Fi connection, then you can simply use whatever authentication technique you normally use. The push, passcode, and phone options all work overseas. You can even add an international phone number as one of your authentication options.

The Duo Mobile app and hardware tokens are encryption items that are subject to export control regulations. This means that travel to Cuba, Iran, North Korea, Sudan, Syria, and the Crimea region of Ukraine will not allow you to use the Duo mobile app or hardware token. In this case, we strongly urge you not to log into applications that require Duo. If you are travelling to these countries and must use Duo, please contact the IT Help Center for a bypass code.  

Make sure you have your MFA device on-hand with the Duo Mobile app open. If you are still having issues, try restarting your computer and trying again. You can also check the priority order of the devices and change them if necessary (Using CSUN's GlobalProtect). For further assistance please contact the IT Help Center.

Lock outs last only a certain amount of time. You can wait for this time to expire or call the IT Help Center to have your account unlocked.

If you need a hardware token, you may request a token in our Help Center ticketing app here. You may also contact the IT Help Center and they will assist you.

Watch these videos if you need assistance:

CSUN Duo - Requesting a Token While Enrolling in Duo - Staff and Faculty (video)

CSUN Duo - Request Token After Enrollment (video)

Yes. DUO does work on departmental accounts. You can either add separate account if multiple uses (phones) or you can add the department account to an existing account as an alias. Please contact the IT Help Center for assistance.