Log In With Duo
This guide takes you through the experience of logging in and enrolling with Duo.
Researching Duo for your organization? Learn about Duo's multi-factor authentication (MFA) solutions.
Log In with Duo
Your log in experience depends on how your organization has configured Duo. You may log in differently depending upon the application.
Log In from a Duo-protected Two-Factor Authentication Application
You log in from a Duo-protected two-factor authentication application when you log into an application and enter your primary username and password, and then get redirected to Duo to complete secondary authentication for additional security.
Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. Click Get Started to begin the setup process.
If you have already enrolled your authentication device, then complete Duo two-factor authentication to access the application.
Log In with Duo Single Sign-On
When you access an application that uses Duo Single Sign-On, it redirects you from that application to Duo's service to verify your login information and complete Duo authentication. SSO applications are typically cloud apps, like Salesforce or Office 365.
If your organization uses its own identity provider to verify your login information, you'll be sent there to enter your username and password information, then sent back to Duo Single Sign-On to complete Duo two-factor authentication.
If your organization uses Duo to verify your login information you'll see the Duo Single Sign-On login page. Enter your username on the Duo Single Sign-On login page and click Next.
Next, enter your password when prompted and click Log in.
Don't know your password? Contact your organization's Duo administrator or help desk.
If you have not yet enrolled with a Duo authentication method, you will be taken to the "Welcome to Duo Security" page to enroll. Click Get Started to begin the setup process.
If you have already enrolled your authentication device, then complete Duo two-factor authentication to access the application.
While other browsers may work with Duo Single Sign-On, Duo actively tests and supports the browsers and minimum versions listed in the Supported Browsers table.
After that you'll be logged into the original application. When you access another application that uses Duo Single Sign-On you won't need to enter your username and password again (since you already entered it when you logged in to the first application).
You may need to complete Duo authentication again when accessing other SSO applications, depending on how your administrator configured the application. If you see a Remember me... or Trust this browser... option from Duo, check that box to skip the Duo prompt when you launch additional SSO applications.
Do not trust the browser when using a public or shared computer! This could leave your Duo session available to other users. Trust the browser only when you access applications from your own computer.
Supported Browsers
Duo Single Sign-On supports Chrome (Desktop and Mobile), Firefox, Safari (Desktop and Mobile), Edge, and Internet Explorer. Not all browsers support all Duo authentication methods, so for the widest compatibility we recommend Chrome.
Check the table below for supported browser versions.
| Browser | Minimum Supported Version |
|---|---|
| Chrome | 38 |
| Safari | 9 |
| Firefox | 47 |
| Edge | 17 |
| Internet Explorer | 11 |
While other browsers may work with Duo Central, Duo actively tests and supports the browsers and minimum versions listed in the table.
Passwordless Login for Duo SSO
If your organization has enabled Duo Passwordless sign-in for SSO then you will see either a notification that you can log in without a password in the future, or a prompt to begin passwordless setup. See the Duo Passwordless documentation for more information and setup instructions.
| Automatic Passwordless Registration | Interactive Passwordless Registration |
 |
 |
Log In with Duo Central
Navigate to your organization's Duo Central URL. If you don't know what that is, contact your administrator.
If your organization uses its own identity provider to verify your login information, you'll be sent there to enter your username and password information, then sent back to Duo Single Sign-On to complete Duo two-factor authentication.
If your organization uses Duo to verify your login information you'll see the Duo Single Sign-On login page. Enter your username on the Duo Central login page and click Next.
Next, enter your password when prompted and click Login.
If you have already enrolled your authentication device, then complete Duo two-factor authentication to access the application.
After that you'll see all your assigned applications in Duo Central. Search for an application by name by entering it into the search bar at the top.
Duo Central supports the same browsers as the Duo Single Sign-On page.
First-time Enrollment in Duo
Enrollment is the process that registers you as a user in Duo with a device capable of performing two-factor authentication.
If your organization requires you to set a Duo password, you will be prompted during enrollment. This only applies if you are enrolling with an enrollment link or with an external identity provider.
You may also need to set up a device for two-factor authentication or for passwordless authentication.
Enroll during Application Login
Duo prompts you to enroll the first time you log into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. Follow the on-screen prompts to set up your Duo authentication device.
Enroll With an Enrollment Link
Instead of enrolling when you log in to an application, you might receive an email from your organization's Duo administrator with an enrollment link. This emailed link takes you directly to the Duo hosted enrollment portal. Click Get Started on the "Welcome to Duo Security" page.
If your organization does not require that you create a Duo password then you'll begin the authentication device setup process.
If your organization requires you to set a Duo password, you will be prompted to create a password. Click Continue.
Create your login password and confirm it.
A screen appears confirming that you have added your password.
Finally, enroll your first authentication device.
Enroll With an Enrollment Code
If you receive an enrollment link with an enrollment code from your organization's Duo administrator, use this link to take you directly to the Duo hosted enrollment portal. Click Get Started on the "Welcome to Duo Security" page to begin the enrollment process.
If your organization does not use its own identity provider to verify your login information, you will be prompted to Enter your enrollment code.
After you have entered your email address and valid unexpired enrollment code, enrollment will start.
If your organization requires you to set a Duo password, you will be prompted to create a password. Click Continue.
Create your login password and confirm it.
A screen appears confirming that you have added your password.
Next, you will enroll your first authentication device.
Enroll With an External Identity Provider
If you receive an enrollment link with an enrollment code from your organization's Duo administrator, use this emailed link to take you directly to the Duo hosted enrollment portal. Click Get Started on the "Welcome to Duo Security" page to begin the enrollment process.
Choose Log in to enroll to use your existing username and password or, use an enrollment code if your Duo administrator gave you an enrollment code.
If you clicked on the Log in to enroll link, you will be prompted to enter your email address. Enter your email address on the Duo Single Sign-On login page, and click Next.
If you are an Active Directory user, enter your password on the Duo Single Sign-On screen.
If your organization uses its own identity provider to verify your login information, you'll be sent there instead to enter your username and password information. You'll be sent back to Duo when done.
If you clicked on the or, use an enrollment code link, you will be prompted to enroll with an enrollment code.
If your organization requires you to set a Duo password, you will be prompted to create a password. Click Continue.
Create your login password and confirm it.
A screen appears confirming that you have added your password.
Next, you will enroll your first authentication device.
Password Resets
You may be able to change your login password ahead of password expiration or if your password is unsafe. Contact your organization's Duo administrator or help desk to find out which password reset options are available to you.
Reset Password
You can update your current account password when logging in if your organization allows it. To do so, click the Need help? link shown on the Duo login page before you enter your username and password, and then click the link for resetting your password.
If you see this screen you'll need to contact your organization's Duo administrator or help desk to assist you with resetting your password.
Enter your current password and continue to the Duo two-factor authentication prompt, where you can verify your identity with Duo Push, a security key, or your choice from whichever verification methods your organization allows.
Enter your current password and then enter and confirm your new password. Make sure to review your organization's password requirements shown on the page before you enter the new password. Click Submit to perform the password reset.
If your password reset succeeds click Continue to proceed.
If your password reset attempt didn't succeed, make sure that you entered your current password correctly, that you typed the same new password into both spaces provided, and that your new password meets the password requirements shown on the reset page. You can try resetting your password again without repeating Duo two-factor authentication.
Password Expiration Warning
Your organization might warn you ahead of time when the password you use to log in will expire. After you enter your current password you'll see a message telling you how many days you have before it expires. Click Reset password if you want to change it now, or click Skip for now to continue logging in without changing your password.
If you skip changing your password then you'll see the warning again next time you log in with your password until it expires.
If you do choose to reset your password now, you'll see the Duo two-factor authentication prompt, where you can verify your identity with Duo Push, a security key, or your choice from whichever verification methods your organization allows.
Enter your expired password and then enter and confirm your new password. Make sure to review your organization's password requirements shown on the page before you enter the new password. Click Submit to perform the password reset.
If your password reset succeeds click Continue to proceed.
If your password reset attempt didn't succeed, make sure that you entered your current password correctly, that you typed the same new password into both spaces provided, and that your new password meets the password requirements shown on the reset page. You can try resetting your password again without repeating Duo two-factor authentication.
If you continue to have issues resetting your expired password, contact your organization's Duo administrator or help desk.
Reset Expired Password
You can update your expired account password when logging in if your organization allows it. If your password has expired, you'll see a notification on the login page after you enter your current password.
You need to complete Duo authentication before you can reset your password. Click Verify identity to begin. You'll see the Duo two-factor authentication prompt, where you can verify your identity with Duo Push, a security key, or your choice from whichever verification methods your organization allows.
After you complete Duo verification, click Reset my password to continue.
Enter your current expired password or a temporary password provided to you by your Duo administrator, and then enter and confirm your new password. Make sure to review your organization's password requirements shown on the page before you enter the new password. Click Submit to perform the password reset.
If your password reset succeeds click Continue to proceed.
If your password reset attempt didn't succeed, make sure that you entered your current password correctly, that you typed the same new password into both spaces provided, and that your new password meets the password requirements shown on the reset page. You can try resetting your password again without repeating Duo two-factor authentication.
If you continue to have issues resetting your expired password, contact your organization's Duo administrator or help desk.
Unsafe Passwords
After entering your current password during login, you may receive a message that Your password is unsafe.
Click Use a different password.
Enter a new password and then enter it again to confirm your new password. Click Submit to change the password.
If your organization informed you that you need to use a different password, you will receive a similar message to Use a different password.
Enter a new password and then enter it again to confirm your new password. Click Submit to change the password.
Temporary Passwords
If your Duo administrator has provided you with a temporary password, you will need to enter it the next time you log in to a Duo SSO application.
During log in, if you see a message indicating New Password Required, you will need to enter your username and the temporary password to complete authentication. Click Verify identity to begin. You'll see the Duo two-factor authentication prompt, where you can verify your identity with Duo Push, a security key, or your choice from whichever verification methods your organization allows.
After entering the temporary password, do not lose it as you will need it again to set your new password.
After completing Duo verification of your identity, click Create password to proceed.
If you were not required to enter your temporary password at log in, but are prompted to create a new password after completing Duo verification of your identity, click Continue to proceed.
Enter the temporary password provided to you by your Duo administrator as the old password and then enter and confirm your new password. Make sure to review your organization's password requirements shown on the page before you enter the new password. Click Submit to perform the password reset.
If your password reset succeeds click Continue to proceed.
Temporary passwords are invalidated once you have successfully created a new password.
If your password reset attempt didn't succeed, make sure that you entered your current password correctly, that you typed the same new password into both spaces provided, and that your new password meets the password requirements shown on the reset page. You can try resetting your password again without repeating Duo two-factor authentication.
If you continue to have issues setting a new password, contact your organization's Duo administrator or help desk.
How to Get Help
If you can't authenticate or aren't sure what to do, contact your organization's Duo administrator or help desk for guidance. If you click Need help? at the bottom-left of the Universal Prompt your administrator may have customized the help text with further instructions or contact information. Please do not contact Duo Support directly, as Duo Support can only assist named Duo account administrators.
If you see an error with an Event ID, provide that info to your Duo administrator or help desk.
