Multi-Factor Authentication (MFA) - Duo

Multi-Factor authentication (MFA) is an online security system for your sensitive and personal information. It requires more than just a password for access. The goal is to create a layered defense for your data so that an unauthorized person finds it more difficult to access. If your password becomes compromised, there will be another level of security to keep your information safe.

BSC uses Duo Security MFA to provide you with even better security for your sensitive information.

Enroll in Duo

How do I enroll in Duo Multi-Factor Authentication (MFA)?

Welcome Screen
Visit https://2fa.ndus.edu and login using your NDUS account ID and password. You will be presented with an enrollment screen, click Start setup to begin.
Choose Your Authentication Device Type
Select the type of device you would like to enroll and click Continue. We recommend using a smart phone for the best experience, but you can also enroll a land-line telephone, or an iOS/Android tablet.
Type Your Phone Number
Select your country from the drop-down menu and enter your phone number. Use the number of your smartphone, landline, or cell phone that you have with you when logging in to a Duo-protected service. You can enter an extension if you chose "Landline" in the previous step.

Double-check that you entered it correctly, check the box, and click Continue.

If you are enrolling a tablet you will not be prompted to enter a phone number.
Choose Platform
Choose your device's operating system and click Continue.

Add a Device

How do I add a new device to Duo Multi-Factor Authentication (MFA)?

Add a New Device
To start enrolling a new device, log into https://2fa.ndus.edu using your NDUS account and password. When prompted for the Duo authentication, select "Settings" and click "Add a new device".
Note: some of the options shown below can vary depending on the device you are using.
Choose your authentication method
Choose an authentication method and complete multi-factor authentication to begin adding a new device.

If you are adding a new device to replace one that you previously activated for Duo Push, don't select the Duo Push authentication method on this page unless you still have the original device. If you don't have the original device, but you have a new device with the same phone number, then you can authenticate with a phone call or SMS passcode.

You cannot add a new device from this page if you do not have access to any of your previously enrolled authentication devices; Please contact the BSC Help Desk for assistance.
Follow the device enrollment process
Proceed with the device enrollment process as shown in the initial Enrollment Guide. As an example, let's add another phone.
Enter your phone number
Enter and confirm the second phone number.
Select your operating system
Select the new phone's operating system.
Install and activate
Install Duo Mobile on the new phone and scan the barcode to activate.
You're all set
The new phone is added and listed with your other enrolled devices. You can click Add another device to start the enrollment process again and add another authenticator.

Install Duo Mobile

How do I install Duo Mobile?

Install Duo Mobile
Why use Duo Mobile?
- It's fast & easy
- Works in any country
- Doesn't require cell service
Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Without it you'll still be able to log in using a phone call or text message, but for the best experience we recommend that you use Duo Mobile.

Find the Duo Mobile App: iPhone App Store Android Google Play

Follow the platform-specific instructions on the screen to install Duo Mobile. After installing our app return to the enrollment window at https://2fa.ndus.edu and click I have Duo Mobile installed.
Activate Duo Mobile
Activating the app links it to your account so you can use it for authentication. On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the platform specific instructions for your device:

The "Continue" button is clickable after you scan the barcode successfully.

Can't scan the barcode? click Or, have an activation link emailed to you instead and follow the instructions.
Configure Device Options (optional)
You can use Device Options to give your phone a more descriptive name, or you can click Add another device to start the enrollment process again and add a second phone or another authenticator.

If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" or "Automatically call this device" and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

Click Continue to login to proceed to the Duo Prompt.

Your device is ready to approve Duo authentication requests.

Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.

MFA Tips/Best Practices

Duo Multi-Factor Authentication (MFA) Tips and Best Practices

Download Spare Passcodes
From Duo Mobile, download and store passcodes in a safe place such as a backpack, wallet, or purse. In the case of a drained or misplaced phone, you can use one of the codes to get access. Codes can only be used once, so we recommend downloading multiple codes at a time.

Enroll Multiple Devices
You can enroll multiple devices on your Duo account. We recommend that you add at least one secondary device such as the phone number of a trusted friend and/or family member.

Use Push
The next time you're prompted by Duo, select "Send Me a Push." You will receive a notification on your device with the Duo app installed. All you need to do is to tap on that notification, approve it and you’re in. The Duo app must be installed for Push to work.
instruction screen

Remember Me
On systems that require you to log in for every instance, you can have Duo remember you for up 10 hours. To activate this, click the check box in front of "Remember me for 10 hours" next time you're prompted by Duo.
tip screen two

What happens if I get a Duo prompt and I’m not trying to log in?
If you receive a Duo authentication prompt (push, text, or phone call) on your device without you initiating the request, decline the Duo prompt (marking it as fraud), immediately change your NDUS account password, and contact the BSC Help Desk. This could be an indication that your credentials have been compromised and someone is attempting to login to your account.