Duo Trusted Access
Data Security is more important than ever. When you connect to networks outside of WFAA offices, security can be more challenging. To make our data more secure, the WFAA is implementing a software product called Duo. Duo employs a two‑factor authentication model when connecting to WFAA via VPN. It may sound difficult or involved, but the Duo solution is actually painless and easy!
How It Works
Two‑factor authentication requires you to confirm your identity twice. One confirmation method is something you already do: supply your username and password. The other method is responding to a message on a registered device, like your smart phone, tablet, or land line.
For example, if you are working offsite and wish to connect to the WFAA network, you launch VPN and supply your username and password. At this point, Duo will send a notification to your mobile device (or call your land line) asking for your approval. After you click a button to approve, you’re in!
Setting Up Your Duo Account
You must register the device which will provide the second method of authentication.
If you wish to use a land line phone for authentication, proceed to the Register Your Device section below.
Smartphones and Tablets
If your registration device will be a smart phone or tablet, you'll need the Duo Mobile app. Here’s how the app appears in the iPhone App Store:
(Do not confuse the Duo Mobile app with the Google Duo – Video Calling app!)
Get and install this application.
Check your mobile device settings, which need to allow notifications. On an iPhone:
- Go to Settings > Notifications
- Select the Duo Mobile application
- If necessary, tap the button to the right of Allow Notifications until it shows a green background:
When your Duo Mobile app is installed and notifications are enabled, proceed to Register Your Device.
Register Your Device
With your registered device at hand, go to your laptop and click the Duo Enrollment link. (This will be provided in an email.)
Click the enrollment link. Follow the instructions, which ask you to describe your device (iPhone, Android phone, tablet, or land line) and enter a phone number.
If you are using a mobile device, you’ll be shown this page:
Click the I have Duo Mobile installed button. You’ll be presented with this:
On your mobile device, launch Duo Mobile. Answer “yes” to the questions “do you want notifications?” and “can Duo access your camera?”, then point your camera at the bar code. Duo Mobile will scan the bar code, then display this:
And in your laptop browser, a green check will appear in the bar code:
Click the Continue button to display a confirmation screen:
The default setting will suffice. Click Finish Enrollment, and you are all set!
With two‑factor authentication in place, you must have your registered device at hand when you use VPN to connect remotely to the WFAA network.
If your device is a land line, Duo will call from an automated voice system that asks you to approve remote access.
If your device is mobile, you’ll be sent a notification that will look something like this:
Click the Approve button to access your application.
Contact the WFAA Help Center If you have difficulty with installing the Duo Mobile application, registering your device, or connecting via VPN.
The Help Center can also assist if you wish to add a second authentication device.