DUO Two-Factor Authentication Faculty/Staff Student Accessing Team Shares Only

DUO Installation Instructions

You will have received an enrollment email from no-reply@duosecurity.com with the subject “Duo Security Enrollment”. Click the link in the email to start the DUO installation process.

If you have not received the DUO enrollment email or deleted it in error, please email helpdesk@ltu.edu for assistance.

Windows 10

1. Navigate to Global Protect on your computer
2. Type vpn.ltu.edu into the portal
3. Enter your Campus login username and password



4. After clicking sign in, you should receive a DUO prompt on the device you previously registered with DUO. Accept the prompt to complete the connection.



5. You should now be connected to the VPN tunnel
Mac

1. Click the globe icon in the system menu in the top right of the screen

2. Enter vpn.ltu.edu for the portal address.



3. Enter your campus username and password, then click Sign In.



4. After clicking sign in, you should receive a DUO prompt on the device you previously registered with DUO. Accept the prompt to complete the connection.



5. Once you have accepted the DUO prompt, the GlobalProtect window on your computer will show connected.
GlobalProtect Installation

Windows Installation

1. Open your internet browser and navigate to vpn.ltu.edu
2. Login using your Campus login username and password.



3. After clicking sign in, you should receive a DUO prompt on the device you previously registered with DUO. Accept the prompt to complete the connection.



4. Select the correct VPN client for your computer, it will then automatically download.



5. Navigate to your downloads folder and double-click the installation file, the program will then install.

Mac Installation

1. Open your internet browser and navigate to vpn.ltu.edu
2. Login using your Campus username and password.



3. After clicking sign in, you should receive a DUO prompt on the device you previously registered with DUO. Accept the prompt to complete the connection.



4. Select Mac 32/64 bit GlobalProtect agent link to automatically download the file.



5. Navigate to your downloads folder/location and double-click the GlobalProtect installation file.



6. Follow the prompts for install. At some point during the installation, you will need to allow Palo Alto to load. This may be indicated with a message indicating the System extension was blocked.



7. If it does not automatically open this system preferences window, you will need to open it manually. This is done by clicking on the Apple icon in the top left corner of the screen. Click System Preferences, Security & Privacy. In the lower portion of the screen, you will see an allow button to be click in order to load the Palo Alto software. This only needs to be done once during install.



DUO Device Management

To manage your DUO settings and devices, go to https://duo.ltu.edu



Select the "My Settings & Devices" link on the left hand side. If an automatic DUO authentication was already in progress, first cancel it from the button on the bottom.





Before settings and devices can be managed, DUO authentication must be performed to prove your identity. 
Select an authentication device and method, and authenticate with DUO



Once authenticated, you will see options to add another device, modify current device options, and change the default behavior when you log in.



It is recommended to set the log in behavior to "Ask me to choose an authentication method." This ensures that pushes are not sent without your approval, this allows flexibility to choose different methods as needed.



If you have changed phones or reinstalled the DUO Mobile app, and the phone number has remained the same, it can be reactivated under the Device Options button. If the device number has also changed, please contact the LTU Help Desk for assistance.



If there are multiple devices added to your account, the default device can be changed. Using the DUO Mobile app on a mobile phone is recommended for ease of use, and provides additional functionality. Methods involving calls and SMS texts also incur additional costs to the university.



When finished click the save icon on the bottom and close the browser tab.



Device Enrollment

For more information please visit: https://guide.duo.com/enrollment

You will have received an enrollment email from no-reply@duosecurity.com with the subject "Duo Security Enrollment". Click the link in the email to start the process. Here is a sample of the email you will receive:



This will take you to the LTU DUO enrollment site. Click to start setup.



Select the type of device to be used with Duo. Using the Duo Mobile app on a mobile phone is recommended for ease of use, and provides additional functionality. Other options are to receive SMS text messages, mobile or landline calls, or use a physical authentication token. However, these methods are not as user-friendly and incur additional costs to the university for each authentication.



For enrollment of a mobile phone, enter and verify the phone number.





iPhone, Androit, and Windows Phones can receive a push from the DUO app. Other cell phones work by receiving a code via SMS text message.



install the DUO Mobile app by searching your phone's app store for "Duo Mobile". Then click "I have Duo Mobile installed".



You can use the phone's camera to scan the QR-code displayed on the computer screen and simplify the activation process. Alternatively, you can select to have an activation link emailed.



On your phone launch the Duo app and select "Get Started"



Align the camera view on the phone to fit the QR-code on the computer screen. It should scan within a few seconds.



The activation screen on the computer will indicate when the barcode is recognized on the phone.



Once activated, set your default Duo authentication setting. It is recommended to select "Ask me to choose an authentication method" to reduce potential problems when using multiple applications.



Click "Finish Enrollment"



Duo FAQs

What is Duo and how does it work?
Duo is a two-factor authentication provider that helps to secure access to applications. After entering your regular LTU username and password a second layer of security takes place where you are asked to prove your identity with a pre-registered Duo device such as a smartphone.

What is two-factor authentication (2FA)?
Two-factor authentication means logging in with something you know (your password) and something you have (your phone or other device). Through this combination an attacker would need to possess both parts to successfully compromise your account.

Do I have to enroll in Duo?
Yes, for faculty and staff to access certain LTU services such as Banner Admin Pages (Formerly Banner Forms), ImageNow, VPN, etc. Duo authentication will be required.

I am a student, do I need to use Duo?
In most cases you do not. You will be able to continue to use the VPN without Duo to access the licensing servers and shared drives. However, if you are a student worker that accesses Duo protected applications such as Banner 9 or ImageNow, you will need to use Duo.

Is Duo usage tied to my computer or my phone?
No, Duo helps to secure LTU applications accessed from any supported device.

How does Duo work with my phone?
Duo can use a phone as a second factor of authentication, either through the Duo Mobile smartphone app, or by receiving SMS text messages or phone calls. The smartphone app is recommended for ease of use, as it only requires tapping to accept or deny the login.

Does Duo make any changes to my smartphone or allow LTU to control other information on
my phone?
No, installing Duo Mobile only serves to provide a second layer of authentication for LTU services. Permissions used by the application are limited to those required for this purpose and to ensure that the device is not already compromised.

Do I need to use a smartphone with Duo?
The Duo Mobile app on smartphone is the recommended method if possible since it is more flexible and easier to use to authenticate. But if you don’t have a smartphone or have one that does not support the app then login codes can be received by SMS text messages to any cell phone, or calls can be received to cell or landline phones.

What if I don’t have a screen lock or passcode on my phone?
In order to add a device to support Duo logins, you will need to first setup a screen lock, passcode, or biometric security on your phone before authenticating to LTU services.

What if I do not have cell reception or am in an area with only roaming data?
In the Duo Mobile app there is a key icon next to the LTU profile that will generate a six digit passcode which can be used to authenticate with Duo. If you do not have a smartphone and will be travelling outside of cell service, please contact the LTU Help Desk to discuss options.

Why is LTU using Duo?
Due to the global prevalence of security breaches in recent years, Duo is being used as an additional measure to protect LTU services. Adding a second factor of authentication for logins greatly improves security. It would be much more difficult for a hacker to both know your password and have possession of your phone or other device.

What devices can I use with Duo?
Duo supports authentication through Android and IOS smartphones and tablets, feature phones (non-smart) by SMS text messages or calls, landlines by calls, and physical authentication tokens. The Duo Mobile app on smartphones and tablets is the easiest, quickest, and most flexible method to use and is therefore recommended. The other options are more difficult requiring manual generation and entry of a changing passcode, and also incur additional costs to the University upon each authentication.