1. NCSA Duo

2. Use NCSA Kerberos Username and Password
Use NCSA Kerberos Username and Password

3. Choose Device Management

5. We are going to add a FIDO UTF token

6. Must use compatible browser on local machine

7. The Light on the blue token will flash while waiting for a tap.

9. Confirm you see a U2F security key added

10. Adding another device

11. Adding Another device – this time a phone

12. Put in your phone number

13. Confirm and click continue

14. Choose platform and continue

15. Install Duo Mobile on your device

16. Note you can have more then one Duo “instance” in your app
Open Duo Mobile
Click + to add
Give permission to camera if asked
Point at QR code
Move phone away from screen if it doesn’t scan at first.
Continue should light up
Note you can have more then one Duo “instance” in your app

17. Generating Backup Codes

19. Save the backup codes somewhere safe.
If you choose to put them in NCSA LastPass, don’t also use Duo for LastPpass

20. Adding a Hardware Token
Account must be setup with U2F or Phone before self-adding a hardware token.
NCSA can add a token to an account for a user.

21. Adding a hardware token

22. Enter the serial number from the back of the token.
You can enter or skip the dashes.

23. Verify that the token ID listed is correct

24. To test that the token works
Logout and back in
Then select device management
Click Enter
Click Enter a Passcode

25. Momentarily press the green button for the number
Type it and click Log In
Press the green button for 1 second and then let off, number will display after a short delay

26. You can remove a token from your account under Device Management

27. Click trash can

28. Two Factor Authentication Everywhere
Enable it with other vendors:
Example Incident:
report/