Protecting your Lafayette NetID with Two-Step Login

Below are instructions for enrolling in Two-Step Login. You may also watch the ITS video tutorial, The DUO Universal Prompt: A New Look for Two-Step Login, to be a helpful resource as well.

1. Browse to an application that uses SSO, such as webmail.lafayette.edu.
   
2. After authenticating with your Lafayette NetID and password, a two-step login frame will display welcome to duo security. Click on “Next”
   
3. Select the type of device you are adding. ITS recommends you register at least two devices, including a mobile phone and, as a backup, your office landline. Select “Duo Mobile” button.
   
4. Enter your phone number when prompted and click the “Add phone number” button.
   
5. Verify ownership by entering passcode. You will be given a 6-digit code sent to the number you provided. Click “Verify”.
6. Next you will be asked to download the duo mobile app. Download Duo Mobile to your phone through Google Play or the Apple App Store. Once complete click “next”.
   
7. Next, you will see a QR code pop up on your screen. Open the app on your phone, tap the “+” button, and move your phone’s camera over the QR code to scan it.
   
8. When it scans successfully, a green check mark alongside Added Duo Mobile will appear. An entry for Lafayette College will show in Duo Mobile. Click “Continue”
   
9. Clicking on “Continue” will prompt you to add a secondary form of authentication. Please see Adding a YubiKey / Universal 2nd Factor (U2F) Token for instructions.
   
10. If you choose to select skip Setup “Setup Completed” will display on the screen along with a Green tick.

Please see Adding a Landline or Device to learn more about how to add more auth devices to your account.

1. Browse to an application that uses SSO, such as my.lafayette.edu.
2. Click “Other options” underlined in blue.
   
3. Click “Manage devices”. Then verify your identity.
   
4. Click “Add a device”, and select the option “Security key”, then click “Continue”.
   
5. Click option “USB security key”.
   
6. Insert security key and touch YubiKey when prompted.
   
7. You should now be able to see your security key listed along with your other devices.
   
8. Now when attempting to login in, if a U2F token is present and plugged in, you will see a black alert pop-up that will say “Use your security key with duosecurity.com.”
   
9. Once you tap the YubiKey, the alert will change and tell you “Success!”.
   

You can use Duo Mobile with the passcode method of authentication on your cell phone or tablet without wifi or a cell signal. In the Duo login frame in your browser, click “Other options”, “Text message passcode”, enter the code from your mobile device, then click “Verify”.

You can also text yourself SMS passcodes to keep with you in case you do not have access to any of your devices. They are especially useful when traveling abroad. SMS codes are one-time use only. To use them click “Text message passcode” under “Other options” in the login frame in your browser. A new passcode can be requested by clicking “Send a new passcode”.

1. Browse to an application that uses SSO, such as my.lafayette.edu.
2. Click “Other options” underlined in blue.
   
3. Click “Manage devices”. Then verify your identity.
   
4. Click “Add a device”, and select the option “Phone number” to add a landline.
   
5. Enter the landline number you would like to add and check the box “This is a landline”, click “Add phone number”.
   

   Under “Manage Devices”, you will now see two phones as options for two-step login. You can change your default device if you like as well as editing, adding or removing devices.