How do I authenticate with Duo?

When you log in to CSU System applications and services that are protected by Duo, you will be redirected to the Duo Universal Prompt and asked to authenticate using one of the following methods:

Duo Push: Sends a notification to the Duo Mobile app on your smartphone or tablet. To approve the login request, tap the "Approve" button in the notification.
- Some CSU System applications and services use Duo Verified Push, which displays a three-digit code in the Duo Universal Prompt. Instead of simply tapping the "Approve" button, you will be required to enter this three-digit code into the notification.
- If you don't receive the push notification, you can also approve the request from within the Duo Mobile app. Open Duo Mobile and tap the "Approve" button at the bottom of the screen.
- Duo Push requires that your mobile device is connected to the internet via a cellular data plan or WiFi. An international data plan should work. If your mobile device cannot connect to the internet, use a Duo Mobile Passcode instead.
- Important: If you ever receive a notification when you are not trying to log in, click the Deny button on your device.
Duo Mobile Passcode: Open the Duo Mobile app on your smartphone or tablet, and click the "Show" button under your account. Enter the six-digit code shown into the Duo Universal Prompt to log in.
Security Key: Connect your USB security key to your computer, and follow the instructions in your browser; this may entail tapping the key or pressing a button.
Hardware Token Passcode: Press the button on your hardware token and enter this code into the Duo Universal Prompt to log in.
- Hardware tokens are available for purchase at RAMTech in the Lory Student Center.
- Tokens can get “out of sync” if the button is pressed too many times in a row and the generated passcodes aren’t used for login. This causes the token to generate codes not accepted by Duo. Please submit a help request if your token is out of sync.
Bypass Code: These special codes can only be generated for you by DoIT's Duo administrators. You may need to input a bypass code if you contact the DoIT Help Desk.

Duo will automatically select your default authentication method; to use a different authentication method, click Other options. Once you have authenticated with your selected method, you will be redirected back to the application.

Note: Do NOT select "Approve a request on my Microsoft Authenticator app". This method is not supported by the Division of IT and will prevent you from successfully accessing the application you are trying to log into.

See the following articles to learn more about registering a device for use with Duo: