Enroll a Smartphone or Tablet in Duo

This document provides instructions for enrolling your mobile device in Duo so you can use it for two-factor authentication (2FA) with systems that require Duo two-factor and Weblogin-protected systems with two-factor turned on.

ATTENTION MICHIGAN MEDICINE!See Duo Two-Factor Security (Michigan Medicine) for instructions specifically for the Michigan Medicine community.

Before You Begin

  • You need a desktop or laptop computer on which to do the enrollment steps.
  • You need your smartphone or tablet on which you will download the Duo Mobile app and activate it. Duo Mobile can be downloaded on the following types of devices: iOS (iPhone, iPad, or paired Apple Watch), Android (smartphone or tablet), or Windows Phone. It is not available on Blackberry phones or Kindle tablets.
  • If you previously installed the Duo Mobile app on a device whose operating system version is no longer supported by Duo, it will continue to work, but it cannot be restored or re-added to the device if you remove it.
  • We recommend that you enroll in both a primary and backup method for two-factor authentication.
  • U-M will only use your phone number for the Duo service, and you can modify or remove it from the system at any time. If you don't wish to provide your phone number when configuring your smartphone, you can enroll it as a tablet.
  • Not sure which option you want to use? Refer to Options for Two-Factor Authentication for more information.

Install the Duo Mobile App

  1. On your mobile device, download and install the free Duo Mobile app from your device’s app store. For detailed steps, refer to Install the Duo Mobile App.

Register Your Device

  1. From a desktop or laptop computer, go to the appropriate web page below and complete the login steps as follows:
    • Ann Arbor, Dearborn, and Flint Campuses:
      1. Go to UMICH Account Management.
      2. Click Log in on the upper-right corner of the page.
      3. Log in with your uniqname and UMICH password.
      4. Click the Two-Factor (Duo) link or tab.
      5. Click Manage Devices.
    • Michigan Medicine:
      1. Go to User Profile Page.
      2. Log in with your uniqname and Level-2 password.
      3. Click the Security Setting tab at the top of the User Profile Page.
      4. Click the Two-Factor Settings tab.
  2. If this is the first time you are enrolling, click Start setup.

    Duo Two-Factor Authentication Start Setup page

  3. If you already enrolled another device or phone number:
    1. Complete a two-factor prompt (i.e., Send Me a Push, Call Me, or Enter a Passcode).
    2. Then click + Add another device on the My Settings & Devices page.
  4. To enroll a smartphone, select Mobile phone, or, to enroll a tablet, select Tablet, then click Continue.

    What type of device are you adding? page. Mobile, table, or landline options.

  5. If you are enrolling a smartphone:
    1. Enter your device's phone number (tablet users will skip this step automatically).
    2. Click the checkbox to verify it’s the correct number.
    3. Click Continue.

    Enter your phone number page

    Note: If you are enrolling a shared phone, you may need to complete an extra verification step. Follow the onscreen prompts to do so.

  6. Choose your device's operating system, then click Continue.

    Verify phone type (operating system) page

  7. Click I have Duo Mobile installed.

    Note: If you have not yet installed the Duo Mobile app, follow the onscreen instructions to install it or refer to Installing the Duo Mobile App.

    Install Duo Mobile page

  8. Open the Duo Mobile app on your device.
  9. Use the Duo Mobile app’s built-in barcode scanner to scan the barcode on screen.

    Activate Duo Mobile page

  10. Click Continue.

    Activate Duo Mobile - Success page

  11. If desired, select a different option in the When I log in drop-down list.

    Important! The default is Ask me to choose an authentication method, which means you will need to initiate an authentication prompt when you log in (e.g., click Send me a Push or Call Me). The other options are Automatically send this device a Duo Push or Automatically call this device.

    Duo Settings and Devices page

  12. To add another device, click + Add another device and repeat the enrollment steps based on the type of device: 

Verify Enrolled Device

  1. If you want to test the device you just enrolled, click the Two-Factor (Duo) tab and then click Manage Devices. You will be prompted to complete two-factor authentication to access your device settings. See Using Duo Two-Factor to Log In for examples of the different methods used to log in, including the common Weblogin interface, SSH clients and Remote Desktop Protocol (RDP).
Last Updated: 
Friday, June 1, 2018