Cisco Duo: First Time Enrolment

Enrolment is the process that registers you as a user in Duo with a device capable of performing two-factor authentication. Duo prompts you to enrol the first time you log into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. Follow the on-screen prompts to set up your Duo authentication device.

Instead of enrolling when you log in to an application, you might receive an email from Lineal with an enrolment link instead.

Introduction

Logging into a Duo-protected application enabled for self-enrolment takes you to the device management page to enrol. Click Next to learn why protecting your identity with two-step verification is important and begin the setup process.

Choose Your Verification Method

Click the device type in the list that matches your desired authentication experience:

• Touch ID: Use the fingerprint sensor on Apple MacBooks and Magic Keyboards. Requires Chrome 70 or later.
• Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.
• Security key: Tap or connect a WebAuthn/FIDO2 security key. Requires Chrome, Safari, Firefox, or Edge.
• Phone number: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo.

Only Lineal can add hardware tokens and Yubikey OTP tokens for you. These verification options do not show up in the list of available options. Neither do any methods that are blocked from use; if Lineal applied a policy that doesn't allow authentication with text messages or phone calls, the "Phone number" option will be missing when you enrol.

Lineal recommends the most secure option of the methods available to you, so it's a good idea to set up that method first if you have a device that supports it.

Add Your Chosen Method

Duo Mobile

Duo Mobile is an app that runs on iOS and Android phones and tablets. It's fast and easy to use, and doesn't require cell services. Duo pushes login requests to Duo Mobile when you have mobile data or wifi connectivity to the internet. When you have no data service, you can generate passcodes with Duo Mobile for logging in to applications.

Select your country from the drop-down list and type your mobile phone number, and then click Add phone number.

If you're going to use Duo Mobile on a tablet (like an iPad) with no phone service, don't enter a phone number and click I have a tablet instead.

If you entered a phone number, double-check that you entered it correctly and click Yes, it's correct to continue (or No, change it to go back and enter the number again).

If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.

Download and install Duo Mobile on your phone or tablet from our guide. Once you have Duo Mobile installed click Next.

Other Verification Methods

Select your preferred verification method then follow the in-app prompts to complete enrolment into the Cisco Duo platform.