Enrollment is the process that registers you as a user in Duo with a device capable of performing two-factor authentication. Duo prompts you to enroll the first time you log into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. Follow the on-screen prompts to set up your Duo authentication device.

Instead of enrolling when you log in to an application, you might receive an email from your organization's Duo administrator with an enrollment link instead. This emailed link takes you directly to the Duo enrollment portal. You'll see either the Universal Prompt experience shown on this page or enrollment in the traditional Duo prompt depending on your organization's email enrollment configuration.

Step One: Introduction

Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. Click Next to learn why protecting your identity with two-step verification is important and begin the setup process.

Step Two: Choose Your Verification Method

Choose the device type in the list that matches your desired authentication experience:

• Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.
• Phone number: Approve a login attempt with a phone call from Duo.

This is an example of the options on a MacBook with Touch ID available:

Step Three: Add Your Chosen Method

Once you choose how to verify your identity, you will next complete the setup steps for that method.

Duo Mobile

Duo Mobile is an app that runs on iOS and Android phones and tablets. It's fast and easy to use, and doesn't require cell services. Duo pushes login requests to Duo Mobile when you have mobile data or wifi connectivity to the internet. When you have no data service, you can generate passcodes with Duo Mobile for logging in to applications.

The current version of Duo Mobile supports iOS 16 or greater and Android 11 or greater.

1. Select your country from the drop-down list and type your mobile phone number, and then click Add phone number.
   If you're going to use Duo Mobile on a tablet (like an iPad) with no phone service, don't enter a phone number and click I have a tablet instead.
2. If you entered a phone number, double-check that you entered it correctly and click Yes, it's correct to continue (or No, I need to change it to go back and enter the number again).
   
3. If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.
4. Download and install Duo Mobile on your phone or tablet from the Google Play Store or Apple App Store. Once you have Duo Mobile installed click Next.
   
5. Open the Duo Mobile app on your phone or tablet and add this account by scanning the QR code shown on-screen.
   If you aren't able to scan the QR code, tap Get an activation link insteadand then enter your email address to send the activation link to yourself. Follow the instructions in the email to activate the new account in Duo Mobile.

   
   

   If you're on a mobile device, tap Open Duo Mobile to activate the new account in Duo Mobile.
6. When you receive confirmation that Duo Mobile was added click Continue.
   

You can now log in to Duo-protected applications with Duo Push

Phone for Call

This option is suitable for mobile phones that can't run Duo Mobile, or office phones and landlines.

1. Select your country from the drop-down list and type your phone number, and then click Add phone number.
   If this phone number is a landline and can't receive text messages, select the This is a landline phone option before continuing.
2. If you opted to add a landline, you can enter the landline's extension on the next screen and click Add extension or click Skip this step if you do not need to enter an extension for your landline.
   
3. Verify that the phone number shown (and landline extension, if you entered one) is accurate and click Yes, it's correct to continue (or No, I need to change it to go back and enter the number again).
   If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.
4. When you receive confirmation of adding the new mobile phone number for texts or calls, click Continue to login to log in to the application with a passcode received via text message or a phone call from Duo.
   If you added a landline phone number, click Continue to log in to the application with a phone call from Duo.