Multifactor Authentication (MFA-DUO): Enrolling and managing devices
Yale University ITS recommends everyone have at least 2 options set up for multifactor authentication; there is no limit to the number of eligible devices you may add to your MFA account. MFA lets you link multiple devices to your account, so you can use your mobile phone, a landline, and a hardware token, as your second factor. You have the option to define which device is the default, set a device to automatically receive authentication attempts, and to rename devices.
When you are initially enrolled in Multifactor Authentication (MFA-DUO), you receive an email with instructions to follow to set up a device for multifactor authentication and a QR code to scan with your smart phone when setting up the DUO Mobile app. Follow the instructions in this email to set up your initial device that you wish to use to authenticate with.
If you did not receive or misplaced the initial enrollment email you can begin the enrollment of your initial device by navigating to http://access.yale.edu and logging in with your NetID and password. It will detect you have no enrolled devices and begin the enrollment process exactly as in the enrollment email. Just follow the on screen instructions to complete setup.
Enrolling additional devices
Once you have your initial device enrolled, you can add additional devices following these steps:
Choose an authentication device and select your authentication method
Once you have approved the authentication, select the device you wish to be default from the Default Device dropdown. This device will be the primary device that any authentication attempts via call, sms or push are sent.
Optionally, you can also set a default for how to handle authentication attempts when you log into a DUO protected resource. Choose one of the following options from the When I log in dropdown.
Ask me to choose and authentication method - Have DUO prompt you to choose Push, Call or Passcode each time you authenticate.
Automatically send this device a DUO Push -When you attempt to log into a DUO protected resource a Push request is automatically sent to this device.
Automatically call this device - When you attempt to log into a DUO protected resource a call is automatically sent to this device to authenticate you.