Enrolling Your Mobile Device In Duo Security


The Policy: California Western is requiring all employees (and consultants with access to sensitive data) to use MFA (Multi-Factor Authentication) when logging into specific applications with your network account (a.k.a. your "AD" account). This 2nd factor verifies your identity and is an important defense against someone using your CWSL network credentials.


Notes:

  • Once enrolled, you will be prompted no more often than once every 28 days (per device or browser) to verify your identity using Duo Security.
  • If you replace your mobile device you will need re-enroll the new device.  


This page describes the steps you will take to enroll your mobile phone into Duo Security. Once enrolled, you'll be ready and able to perform Multi-Factor Authentication when that is enabled on your CWSL network account.


  These instructions assume you have received the official Duo Security enrollment invitation email.  These instructions follow along with the steps in that invitation.

 

When IT sends you the invitation to enroll in Duo MFA, you'll receive an email with the large CWSL logo that looks like the email outlined below in red.  


Step 1 - Click on the first link in the email.


  (Note: if you get to a blank web page, hit your browser's refresh button.)





Step 2  - Click Start setup
(again, if you see a blank page on the browser screen, click your browser's refresh button)



Step 3 - Select Mobile Phone (typically)



Step 4 - Enter your mobile phone number



Step 5 - Select your device type



If you have not yet installed the Duo Mobile app, go to your device platform app store (e.g. either the Google Play Store or Apple iTunes App Store). Search for Duo Mobile.


Note: if you have an Android phone, do not go to the device manufacturer's app store (e.g. the Samsung App Store). You won't find the Duo Mobile app there.


After installing the Duo Mobile app you are ready to proceed with the remaining steps.

Step 6 - Click on I have Duo Mobile installed



Step 7 - Scan the QR code on your computer screen using the Duo Mobile app on your phone. 
To do this, tap the "+" at the top of the screen in the Duo Mobile app on your mobile phone. This activates the camera on your phone and allows the app to scan the QR code on your computer screen.
  
IMPORTANT: If your phone prompts you to ask if Duo should be allowed to use the camera, you must allow this. 

Hold your phone up to your computer screen to scan the QR code. 

This enrolls your phone with your Duo Mobile account and links it to your CWSL AD account. 



The following screen indicates you have successfully activated your mobile device with Duo Security.  



Step 8 - IMPORTANT STEP!
The following screen is where you will select the notification type you will receive when you log into a CWSL system that requires MFA.  We strongly suggest using the push notification to the Duo Mobile app, rather than prompt every time.  Push notifications to the app are not only the most secure method but also the fastest and easiest to use. 
1. Click the dropdown by When I log in and select Automatically send this device a Duo Push (this is highly recommended)

2. Click Save

3. Click Finish Enrollment



This completes the process of enrolling your device with Duo!   

You are ready for the next step in which IT will enable MFA login enforcement for your CWSL account.  However, you won't see any MFA prompts until IT has set MFA enforcement on your network account.  At this point, you are ready for that step!