Skip to main content

Duo Security Multi-Factor Authentication

Duo Security multi-factor authentication for staff and faculty is now in effect for University applications such as myBoiseState, G Suite, Blackboard, Zoom web client, Campus Solutions, and Bronco Hub. Authentication is required for faculty and staff logging in from a location off-campus or without connecting to VPN first.

Boise State partners with Duo Security to provide multi-factor authentication. This service may also be referred to as “Duo.”

Multi-factor authentication adds another layer of security to our systems. It requires you to verify your identity using another method (like your mobile device) to prevent anyone else from logging into your accounts, even if they know your password.

How does it work?

  1. If you haven’t yet enrolled, watch for an email from Duo Security with the subject, “Duo Security Enrollment.” This email is legitimate and contains a link to enroll your phone, tablet, or other device. The email looks like this:
    Duo Enrollment Email
  2. When you receive the email, click the link and follow the instructions to enroll. Enrollment is easy and step-by-step instructions (including a video demonstrating the process) are available in Duo’s online enrollment guide.

Frequently Asked Questions

Why do we need Duo?

Duo Enhances Security

Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords. Duo enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

Which services use Duo?

Duo Services

As of September 15, Duo Security multi-factor authentication for staff and faculty is now in effect for University applications such as myBoiseState, G Suite, Blackboard, Zoom web client, Campus Solutions, and Bronco Hub.

Authentication is required for faculty and staff logging in from a location off-campus or without connecting to VPN first.

Do emeriti need to use Duo?

Emeriti Accounts and Duo

Yes, accounts with emeritus status are required to use Duo to log into University applications such as myBoiseState, G Suite (which includes email), Blackboard, Zoom web client, Campus Solutions, and Bronco Hub.

What are the options for enrolling?

Duo Enrollment Options

You can enroll in Duo in the following ways:

  • Download the free Duo Mobile app to your cell phone, tablet, or Apple Watch. Using this method, a push notification is sent to the app. Simply accept the notification to verify your identity and connect.
  • Add a mobile (or landline) number to receive a phone call. When the call is answered, you will be instructed to press any number to verify your identity and connect.
  • Add a security key. This is a physical device that your department must purchase from OIT. Enter the code displayed on the device when prompted to verify your identity and connect.

Duo Mobile Push Notifications

The Duo Mobile app is the recommended method of enrollment.

It is the fastest, easiest, and most secure way to authenticate. The app lets you tap to approve your login, eliminating the need to enter codes. Download the free Duo Mobile app to your cell phone or tablet (App Store or Google Play Store).

Why is SMS no longer an option?

Authenticating Using Text Message

The Office of Information Technology adheres to the “Concept of One” as a strategic pillar; we align our IT systems to reduce duplication of effort and services. By encouraging and supporting the use of the Duo Mobile app for iOS and Android to approve logins through push notifications we can provide an optimal user experience for Boise State faculty and staff while ensuring our systems are safe and secure.

The vast majority of people find using the Duo mobile app to be the most convenient way to authenticate.

I don’t want to install this app on my personal device. What else can I do?

Duo Mobile App

We understand your concern, and we know that adding this extra step while most are working remotely is especially challenging. That’s also why it’s critical to stay on top of security and add this additional layer of protection. That being said, the Duo Mobile app is the quickest and easiest way for you to authenticate. We hope you’ll try it out.

If you really don’t want to use Duo Mobile, you may enroll using any of the other methods listed above.

How will Duo change my login experience?

Multi-Factor Authentication

When logging in, you will still enter your username and password. After inputting your login information, Duo requires you to complete a method of second-factor authentication.

Duo Security Login

For VPN connections, when you see the screen similar to the one pictured, click in the Answer: field and enter your option (1, 2, etc.) then click Continue.

Duo VPN multi-factor

Do I have to use Duo Security every time I login?

Remember Me Option

No, there is an option to “remember me” for 7 days. Simply check the box next to “Remember me for 7 days” before you choose an authentication method.

(Note: This option isn’t available for VPN connections.)

Do I need a smartphone to use multi-factor authentication?

No Smartphone Required

No, a smartphone is not required. You may also register using a mobile number, a landline number, or a security key.

What is the Duo Mobile app?

Duo Mobile

Duo Mobile is a free mobile application (app) that you install on your smartphone or tablet to generate passcodes for login or receive push notifications for easy, one-tap authentication on your mobile device. It works with Duo Security’s multi-factor authentication service to make your logins more secure.

Download the free Duo Mobile app to your cell phone or tablet (App Store or Google Play Store).

What data does Duo collect?

Duo Privacy Information

Duo collects a minimal amount of metadata about the user’s device, such as browser, operating system, and IP address. Visit Duo’s website for more information, including a Privacy Data Sheet which contains a full list of data elements.

How can I obtain a security key?

Hardware Tokens

A security key, also known as a hardware token, may be purchased for you by your department for $45.

Please fill out a request form (link below) or contact the Help Desk for more information. To complete the form, log into Help Desk Self Service using your Boise State username and password. You’ll also need to provide your department account code for billing.

Duo Security Key Request Form

Note: The battery life of a security key is approximately two years. When the battery runs out, a new hardware token must be purchased.

Can I enroll more than one device?

Multiple Enrolled Devices

Yes, you may enroll more than one device. Log in to myBoiseState and navigate to the Duo Device Management portal to add additional devices. (The portal will display a “Page Not Found” error if you are not logged into myBoiseState first.)

How can I make changes to my enrolled device?

Edit Enrolled Device

You may make changes to your enrolled device by logging into myBoiseState and navigating to the Duo Device Management portal . (The portal will display a “Page Not Found” error if you are not logged into myBoiseState first.)

The edits allowed for enrolled devices are minimal. In some cases, it may be necessary to re-add your device by clicking the “+ Add another device” link.

Can I use email as an enrollment option?

Email Enrollment Option

Unfortunately, email is not an available option for multi-factor authentication. Please use one of the methods described above.

What if I lose my phone?

Lost Phone

If you lose your phone or suspect it has been stolen, please contact the Help Desk immediately at (208) 426-4357.

Contact the Help Desk

Questions and Assistance

For questions or additional information please contact the Help Desk at (208) 426-4357, helpdesk@boisestate.edu, or chat.

Back To Top