!

Multifactor Authentication: How to Register a Device and Begin Using the Service

Guidelines for Deciding What Type of Devices to Register

You have the option to register a wide variety of devices to use with multifactor authentication. How do you know which device is the best fit? Consider these general guidelines:

  1. If you have a smartphone, enroll your smartphone for multifactor authentication and select “Send me a Push” when authenticating. A notification will be sent or "pushed" to your smartphone when you try to log in. Tap Approve to complete the login process.

  2. If you have a regular cell phone, then enroll your phone number for multifactor authentication and select either “Call Me” or “Enter a Passcode” when authenticating. “Call Me” will call your cell phone number and prompt you to press 1 to complete the login process. “Enter a Passcode” allows you to text a code to you cell phone, which you will then enter to complete the login process.

  3. If you don’t have a cell phone, enroll your office phone and/or home phone for multifactor authentication by completing the steps in “Register a Landline (Office Phone) below. Use “Call Me” when authenticating.

  4. If you do not have a cell phone or a home phone, then stop by the Technical Support Desk at the University Store on Fifth to discuss the use of a hardware token.


Step 1: Register a Mobile Phone, Tablet, or Non-Smartphone

It is recommended that you register a mobile phone for use with multifactor authentication. The instructions below explain how to register an Android phone. The process for registering an iPhone, Windows phone, or BlackBerry are very similar. You can also register a tablet or non-smartphone by following these steps. If you would like to register a landline (for example, an office phone), follow the instructions in the next section.

1. Log in to the Manage My Account service with your University Computing Account username and password.

2. Click Add/Manage Pitt Passport Devices.

3. Click Start Setup.

Start Setup

Note: If you have already registered a device, the screen shown below will display in place of the "Start setup" screen. Click Add another device.

4. Select Mobile phone and click Continue. (To register a tablet, select Tablet.)   

5. Enter your mobile phone number, verify it is the correct phone number by selecting the checkbox, and click Continue.

6. Select the type of phone you are registering and click Continue
Note for registering non-smartphones: If you are registering one of these devices, click Other and complete the remaining screens that display in the wizard.

7. Install the Duo Mobile App for your phone from the Pitt App Store, Google Play (Android devices), the Apple Store (iOS devices), or the Microsoft Store (Windows devices).
When the app is installed, click I have Duo Mobile installed.  

8. Open the Duo Mobile app on your phone, tap the plus (+) sign on the app, and use your phone to scan the new barcode on your computer screen.
Note: A sample barcode example is shown below. Do not scan this barcode.

9. Once the barcode has been scanned, the screen below will display on your mobile phone

and the screen below will display on your computer. Click Continue.

10. Choose what you want to happen when you log in to a service that requires multifactor authentication. By default, you will be prompted to choose an authentication method. If you know you will always want to receive a "push" notification (i.e., an Approve/Deny confirmation screen that displays on your phone), you can save time by selecting "Automatically send this device a Duo Push." When you are finished, click Save

11. It is recommended that you register more than one smartphone, cell phone, tablet, or landline for multifactor authentication. That way, if you do not have your smartphone with you, you will still be able to log in using a tablet or landline. To register a second device, click Add another device on the screen above and follow the same steps.  



Step 1 (alternative): Register a Landline (Office Phone)

The steps below explain how to register a landline (for example, an office phone). It is recommend that you register a mobile phone for use with multifactor authentication. To do so, follow the instructions in the previous section. 

Notes

  • If you choose to use a landline, it must be an individual telephone registered to you. You may use your office phone, but you may not register a shared telephone.

  • If you plan to use a landline as your primary device, remember that you will need to have access to that specific phone whenever you want to log in to a service that is protected by multifactor authentication.

1. Log in to the Manage My Account service  with your University Computing Account username and password.

2. Click Add/Manage Pitt Passport Devices.

3. Click Start Setup.
Note: If you have already registered a device, the screen shown below will display in place of the "Start setup" screen. Click Add another device.

4. Select Landline and click Continue. (Keep in mind that a mobile phone is recommended.)  

5. Enter the phone number, verify that it is the correct number by selecting the checkbox, and click Continue.

6. The landline will display in the list of devices you have registered. If you want to make your landline the primary device you use to log in with multifactor authentication, select it under the drop-down menu titled Default Device.


Step 2: Log in Using Multifactor Authentication

After you have registered a device, you will be prompted to use your device whenever you log in to a protected service. The screen below will display when you attempt to log in.

Authentication Options

 

You can authenticate in one of three ways: 

  • Send Me a Push

    If you select Send me a Push, a notification will be sent or "pushed" to your mobile phone or tablet. You simply need to tap Approve to complete the login process.

    Important: If you receive a login request that you were not expecting, tap Deny to reject the request. You will be given the ability to report it as fraudulent, or you can tap It was a mistake to deny the request without reporting it. You should only click Approve if you were expecting to receive a push notification because you were trying to log in to a service.

  • Call Me
    If you select Call Me, the authentication screen will indicate that it is calling your mobile phone or landline. Answer the call. If you were expecting the call, press 1 to complete the login process. If you were not expecting the call, press 9 to report it as fraudulent.
    Note: If you are using a landline at UPMC Children's Hospital and are using the "Call Me" authentication option, you will need to press the # key, then 4, then 1 to approve the authentication request. To deny the authentication request, press the # key, then 4, then 9.
     
  • Enter a Passcode  

    If you select Enter a Passcode, the authentication screen will prompt you to enter a code (e.g., a series of numbers). If you do not have a code, click the Text me new codes button and a code will be sent to your mobile phone.

    Enter the code in the green box and click Log In.

    Tip: You can also generate a passcode at any time from within the Duo Mobile app. Just click the key icon next to the University of Pittsburgh account.

Note: If you have more than one device registered, you can click the Device drop-down menu to select the device you want to use to authenticate.