Your organisation may have chosen to enable Workspaces two-factor authentication service, which adds an additional layer of security to your workspace. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
If enabled, Workspaces will ask you to verify your identity after you have entered your account username and password.
At this point, the options for verifying your identity will depend on how your organisation has chosen to configure this service. You may be able to perform verification by:
- Using the Duo.com mobile application (Send Me a Push).
- Receiving a phone call with an automated voice (Call Me).
- Entering a passcode generated by the Duo.com mobile application, or received by SMS text message (Enter a Passcode).
- Using a hardware token.
Send Me a Push
This is the recommended method for verifying your identity. It requires the installation of a free app on your mobile phone; if your organisation has chosen to use this method, you will receive instructions on how to install the app when your user account is created. You must be connected to the internet to use this method.
When you click the "Send Me a Push" button, you will receive a push notification on your phone. A prompt will now appear, giving you the option of either approving or denying the verification request. If you choose to approve this request, you are verifying your identity and you will be successfully logged in to your workspace(s).
**Please note that that Duo.com mobile app support has ended for iOS9 and Andriod 5 (Lollipop) operating systems. This does not mean that the app will not work, rather that security and feature updates will no longer be available to users with these OS. We would therefore encourage you to upgrade in order to ensure that you are not vulnerable to security issues and continue to receive the full Duo Mobile functionality.
If you do not have a mobile phone or would like to use a landline phone instead, an alternative method for verifying your identity is to receive and interact with an automated phone call.
You will receive a call on your chosen phone number with an automated voice instructing you to press any key on your key pad. Once you have done this, you will be successfully logged in to your workspace(s).
Enter a passcode
Push notifications require your mobile device to be connected to the internet, so if your device is not regularly connected, you may choose to enter a passcode to verify your identity. This can take the form of either:
- generating a passcode using the mobile app, or
- requesting an SMS text message containing passcodes
When you have a passcode, entering it into the prompt on your screen will successfully log you in to your workspace(s).
If you would rather not use either a mobile or a landline phone to verify your identity, you can choose to use a hardware token. This is a physical device that can generate a passcode that you enter into the prompt on your screen.
Workspaces two-factor authentication service supports the use of YubiKey tokens, in addition to devices that implement the Universal 2nd Factor (U2F) protocol.