Your  Account:

Duo Multi-Factor Authentication (MFA)

how duo works

DUO multi-factor authentication (MFA) is an additional method of verifying your identity and protecting your information when you log into  CSUSM sytems and websites. 

All students, staff, and faculty accessing CSUSM systems and application are required to use multi-factor authentication. 

  • I Need to Set Up DUO

    Self Service DUO setup is currently available for newly admitted students.  Current Students, Staff and Faculty, please  review the " I Need Help with DUO" information.

    Step 1: Log in to your MyCSUSM

    Step 2: Click on DUO Self Enrollment, located under Quick Links.

    student Center Duo link

    Step 3: Select Register Smartphone with app in the How do you want to enroll in MFA? menu.

    Step 4: At the bottom of that screen, select the mobile phone number that you will use for DUO.

    Step 5: Click Enroll

     Duo set up screen 1

    Step 6: Follow the instructions to download the DUO mobile phone app and enroll in DUO.

    Self-Enrollment Check DUO Setup
  • How do I know if DUO is setup correctly?

    If already enrolled,  Log in to your MyCSUSM to the DUO self enrollment page.  You will see this message.  Click the “check DUO setup"

    Check DUO Setup

    DUO Send push

    1. Send a push (recommended)

    Push notification

    2. Push any key when responding to the phone call

    3. Send enter a passcode:

    DUO refreshing passcode

    Success message

    If you get an error at any point in the process, please check additional information on this page or contact the help desk.

  • I Got a New Phone and Need to Reset DUO

    Please reach out to the Help Desk

    Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
    Email: helpdesk@csusm.edu (fac-staff)
    Email: techsupport@csusm.edu (students)

    Phone: 760.750.4790

  • I am Locked Out of DUO
    If you're locked out of DUO, please wait 90 minutes and try logging in again.

     

    After 90 minutes have passed, if you are using DUO push and getting locked out, try to use the Passcode method instead. 

    Duo locked out banner 

  • I Need Help with DUO

    If you encounter any issues enrolling in Duo, including the error message above, please:

    1. fill out our DUO Identity Verification Form. 

    DUO Identity Verification Form 

      2. Once the form is submitted, our staff will review the submission and attempt to verify your identity using our verification tool.  If successful, we will contact you using the provided email address to send updates regarding your request.

    Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
    Email: helpdesk@csusm.edu (fac-staff)
    Email: techsupport@csusm.edu (students)

    Phone: 760.750.4790

  • What To Do When You Receive An Unexpected DUO Request

    Never approve an authentication request from DUO if you have not been attempting to log into a CSUSM or Microsoft resource. Depending on which type of authentication request you chose, these requests may come as push notifications, text messages or phone calls. Do not approve or accept any request for authentication if you did not do something to trigger that request.

    If you receive a push notification not in conjunction with a login you initiated, you can report it directly from your mobile phone in the DUO app by selecting 'DENY.'

    If you accidentally approved a push notification in either app or if you received an unexpected voice call from DUO, you should report these to the Fac/Staff Helpdesk, or call (760) 750-4790 immediately. In rare cases, this could be someone who is trying to gain access to your account with knowledge of your password.

    If it is a one time request and you click ‘DENY,’ then you have stopped that access request. In Duo, click 'DENY' then click 'IT SEEMS FRAUDULENT.'

    Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
    Email: helpdesk@csusm.edu (fac-staff)
    Email: techsupport@csusm.edu (students)

    Phone: 760.750.4790


 

More Information

  • Where do I go to install the app on my Mobile Device?
  • Do I need a smartphone to use Duo?

    A smartphone is the easiest and most convenient way to use DUO, but If you have no smartphone, your smartphone is too old (iOS 10 and older or Android 5 and older), or you would prefer not to use your personal smartphone with the Duo Mobile app, you may request a hardware token (key fob) to use instead.  Please make arrangements to go to the helpdesk to request a key fob.  Make sure to bring your campus ID when you come to pick it up.

    Faculty/Staff : helpdesk@csusm.edu

    Students : techsupport@csusm.edu

  • What Happens If I Lose or Forget My Phone?

    If you lose your phone or suspect it has been stolen, contact the helpdesk immediately. The team can disable your phone from being able to authenticate with multi-factor authentication and can assist you with logging in with another method.

    Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
    Email: helpdesk@csusm.edu (fac-staff)
    Email: techsupport@csusm.edu (students)

    Phone: 760.750.4790

  • How do I allow my Duo on my browser to remember me for 12 hours?

    To avoid being prompted by Duo multiple times a day, select the checkbox next to Remember Me for 12 hours during log-in.

    Due to some technical limitations on Remember Me for 12 hours:

    • It won’t carry over between different computers, or when switching between web browsers (from Chrome to Firefox, for example).

    • It may not carry over between different internet providers, campus services, if you block cookies, or are using Incognito mode.

    Remember me

  • What if I need to change my phone number?

    Please fill out this MFA Identity Verification Form. Once the form is submitted, our staff will review the submission and attempt to verify your identity using our verification tool.  If successful, we will contact you using the provided email address to send updates regarding your request to modify MFA settings.

    DUO Identity Verification Form

     

  • What if I cannot scan the QR code?

    If you are unable to scan the QR code for any reason, there is alternative way by sending a code to your CSUSM email:

    1. When you are prompted in the CSUSM app, click "Take me to Duo mobile"

    Take me to Duo

     

    2. Next, you will be prompted to scan the QR code, but since you are on the mobile device and cannot scan it, click the link Email me an activation link instead.

    Email Duo Code

     

    3. Please input your CSUSM email address to send the code to. Once you receive that code, please input that code on the following screen. You will then have activated Duo!

    Input Email Code

  • Duo gave me a prompt "We have detected some security issues with your device"

    If you are getting prompted by Duo at the bottom of the Duo Mobile app, click "Fix Now" 

     iOS Fix Now

    It will show exactly what the issue is (below is an example of iOS being out of date)

     iOS issue detected

    Below explains the importance of updating the OS version of your phone to ensure attackers cannot exploit vulnerabilities.

    why should I update iOS screen

  • What if I don't have a cellular connection?

    The DUO mobile app has a feature that will give you a special number to input for offline use. 

    Take me to Duo

  • If you require assistance from an administrator

    Please fill out this MFA Identity Verification Form. Once the form is submitted, our staff will review the submission and attempt to verify your identity using our verification tool.  If successful, we will contact you using the provided email address to send updates regarding your request to modify MFA settings.

    MFA Identity Verification Form

  • If you travel outside of the United States

    Travel to Cuba, Iran, North Korea, Sudan, Syria and the Crimea region of Ukraine

    • You MUST uninstall DUO from any device that has DUO installed
    • DO NOT take your DUO hardware token with you.

    Traveling With DUO to non-sanctioned countries
    Options: to use DUO:DUO mobile app: Most of the time, you can safely use the DUO mobile app on a smartphone or tablet. Even if you don’t have cell phone service or a Wi-Fi connection, the app can still generate a passcode. If possible, enroll a secondary device in case your primary device is unavailable. (NOTE: try to avoid taking your device(s) to a high risk country).
    Hardware Token: If you are travelling without a smartphone or tablet, take your hardware token with you (unless you are travelling to a sanctioned country)
    Generate passcodes: before travelling, generate 10 passcodes using your DUO mobile app so you have a backup option to log into your device. Make sure to keep these codes on your person and never leave them unattended with your device