Enroll a Smartphone or Tablet in Duo

This document provides instructions for enrolling your smartphone or tablet in Duo so you can use it for two-factor authentication (2FA) with systems that require Duo two-factor and Weblogin-protected systems with two-factor turned on.

Need help? Contact the ITS Service Center.

Contents

Before You Begin

  • You need a desktop or laptop computer on which to do the enrollment steps.
  • You need your smartphone or tablet on which you will download the Duo Mobile app and activate it. Duo Mobile can be downloaded on the following types of devices: iOS (iPhone, iPad, or paired Apple Watch), Android (smartphone or tablet), or Windows Phone. It is not available on Blackberry phones or Kindle tablets.
  • If you previously installed the Duo Mobile app on a device whose operating system version is no longer supported by Duo, it will continue to work, but it cannot be restored or re-added to the device if you remove it.
  • We recommend that you enroll in both a primary and backup method for two-factor authentication.
  • U-M will only use your phone number for the Duo service, and you can modify or remove it from the system at any time. If you don't wish to provide your phone number when configuring your smartphone, you can enroll it as a tablet.
  • Not sure which option you want to use? Refer to Options for Two-Factor Authentication for more information.
  • To use an Apple Watch, enroll the paired iPhone. Then use the companion Watch app on the iPhone to show the Duo app on your Apple Watch.
  • To use an Android smartwatch, enroll the paired phone and ensure that notifications are enabled on the phone. There is not a stand-alone Duo Mobile app available for Android smartwatches. To approve authentications, your phone must be unlocked. If your phone is normally locked, you can enable Smart Lock in order to approve notification actions.

Install the Duo Mobile App

  1. On your mobile device, download and install the free Duo Mobile app from your device’s app store. For detailed steps, refer to Install the Duo Mobile App.

Enroll Your Device and Turn on Two-Factor for Weblogin

  1. From a desktop or laptop computer, go to Turn On Two-Factor (Duo) for Weblogin.
  2. Log in with your uniqname and UMICH (Level-1) password.
  3. If this is the first time you are enrolling, click Continue. If you already enrolled a device, click Enroll a backup or alternate device, complete a two-factor authentication method (Send Me a Push, Call Me, or Enter a Passcode), and click +Add a new device.

    Duo Two-Factor Authentication page

  4. If this is the first time you are enrolling, click Start setup.

    Duo Two-Factor Authentication Start Setup page

  5. To enroll a smartphone, select Mobile phone, or, to enroll a tablet, select Tablet, then click Continue.

    What type of device are you adding? page. Mobile, table, or landline options.

  6. If you are enrolling a smartphone:
    1. Enter your device's phone number (tablet users will skip this step automatically).
    2. Click the checkbox to verify it’s the correct number.
    3. Click Continue.

    Enter your phone number pageNote: If you are enrolling a shared phone, you may need to complete an extra verification step. Follow the onscreen prompts to do so.

  7. Choose your device's operating system, then click Continue.

    Verify phone type (operating system) page

  8. Click I have Duo Mobile installed.

    Note: If you have not yet installed the Duo Mobile app, follow the onscreen instructions to install it or refer to Installing the Duo Mobile App.

    Install Duo Mobile page

  9. Open the Duo Mobile app on your device.
  10. Use the Duo Mobile app’s built-in barcode scanner to scan the barcode on screen.

    Activate Duo Mobile page

  11. Click Continue.

    Activate Duo Mobile - Success page

  12. If desired, select a different option in the When I log in drop-down list.

    Important! The default is Ask me to choose an authentication method, which means you will need to initiate an authentication prompt when you log in (e.g., click Send me a Push or Call Me). The other options are Automatically send this device a Duo Push or Automatically call this device.

  13. Click Continue to Login.

    Duo Settings and Devices page

  14. Complete a two-factor authentication method (Send Me a Push, Call Me, or Enter a Passcode).

    Duo Two-Factor Authentication page

  15. You have completed the steps to enroll a device in Duo and turn on two-factor for Weblogin. Use the links to review best practices or enroll a backup device, or close the browser window to exit.

    Duo Settings and Devices page

Note: If you enrolled:

  • An iPhone and want to use the Duo Mobile app on an Apple Watchuse the companion Watch app on the iPhone to show the Duo Mobile app on your Apple Watch.
  • An Android smartphone, you can receive and approve Duo push notifications on a paired smartwatch if you ensure that notifications are enabled on the phone. To approve authentications, your phone must be unlocked. If your phone is normally locked, you can enable Smart Lock in order to approve notification actions.
Last Updated: 
Monday, October 15, 2018