/
Set up Multi-Factor Authentication (Duo)


     ITS Home  |  Service Catalog  |  Self Help  |  Support Center  |  Contact ITS Service Desk     

Set up Multi-Factor Authentication (Duo)

DUO Logo Icon

Students, staff, and faculty must use Duo multi-factor authentication (MFA) to access the My Cal Poly Portal, Cal Poly Canvas, Microsoft email and calendar, and all other web-based services that require a secure login.

(MFA is NOT required for Cal Poly shared club/department accounts.)

IMPORTANT:

  • DO NOT CHOOSE FACE/TOUCH ID when you first enroll a device.

  • Choose Duo Mobile (Push) as the primary form of authentication.

What if I already chose Face/Touch ID initially?
If you’ve already set up Face/Touch ID as your first form of authentication, here’s how you can change that:

  1. Log in to My Cal Poly Portal using the device that you set up with Face/Touch ID.

  2. Click the Personal Info tab.

  3. Under the Authorized Devices tab, click Multi-factor Authentication.

  4. Click Edit to add a new device. See the following Knowledge Base article for more details – Add a New Mobile Phone to My Duo Account.

NOTE: After enrolling your primary device, adding a secondary device is highly recommended when using multiple devices (i.e., an iPhone and a laptop).

Step 1 – Add a Primary Device (First-time setup)

When you first attempt to access the My Cal Poly Portal or a Cal Poly application (that is MFA/Duo-enabled), you will see a Welcome to Duo Security prompt. Click Next. Subsequent screens will present information about the importance of MFA. Click through those until the Select an option prompt appears… Choose your preferred device type below to view setup instructions:  Duo Mobile (Push) – RECOMMENDED: Approve Duo Push verification requests on iOS or Android devices or generate a one-time passcode from the Duo Mobile app. Touch/Face ID: - DO NOT CHOOSE AS PRIMARY: Use the fingerprint sensor on Apple MacBooks, Magic Keyboards, or iPhones. Security key: Tap a WebAuthn/FIDO2 security key. Requires Chrome, Safari, Firefox, or Edge. Phone Call or Duo Mobile Passcode: Receive a phone call or a one-time passcode. Token: Use a hardware token.

Step 2 – Add a Secondary Device