Duo

What is Duo Multi-Factor (MFA) Authentication?

Multi-factor authentication (MFA) enhances the security of your USC NetID by requiring a secondary form of verification beyond username and password. Verification can be completed by mobile device, computer, or authentication token when you sign into services using your USC NetID. This added layer of security protects your account and personal information—even if your password is compromised, access is blocked without secondary authentication.

Duo is free and required for all current USC NetID owners, whether faculty, staff, students, or affiliates.

Enrolling Devices for Duo MFA for the First Time

NetID owners are required to enroll in Duo immediately after they have activated their USC NetID, before they can access USC digital resources. We strongly recommend users enroll in Duo using more than one device and/or verification method.

1.Visit https://account.usc.edu/2fa/enroll

2. If prompted, sign in using your USC NetID username and password.

3. You will be taken to the Welcome to Duo Security page. Click the “Get Started” button.

4. You will be asked to enroll a device or method, which will be listed by the most secure option available.

Users can enroll in Duo using various devices and methods (from most to least secure):

  • Platform Authenticators such as Apple Touch ID and Face ID, Windows Hello, and Android Biometrics
  • Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time time-based passcode from the Duo Mobile app. To download and install the Duo Mobile app on your device, visit your device’s application store and search for “Duo Mobile.”
  • Roaming Authenticators that support the FIDO2 or WebAuthn authentication standard, like Yubico’s YubiKeys. Requires Chrome, Safari, Firefox, or Edge.
  • Phone number: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo.

For instructions on enrolling your specific device, please refer to Duo’s documentation at https://guide.duo.com/universal-enrollment.

Note: Duo Security will send you an email to notify you whenever a device is added or removed from your Duo account.

Managing Your Enrolled Devices

https://guide.duo.com/universal-prompt#add-or-manage-devices

Users can review and manage their enrolled devices through https://itservices.usc.edu/uscnetid, or through the Managed Devices page after successfully authenticating to a USC service using their USC NetID.

For more information, see guide.duosecurity.com/manage-devices.

Forgot your Device? Get a Temporary Bypass Code

Users who have already enrolled in Duo can generate a temporary bypass code when they are experiencing issues with their mobile devices (e.g., mobile service is disrupted, the device is lost or stolen, etc.) or who temporarily can’t use their enrolled device. They are not to be used as a user’s only verification method.

Please visit USC NetID Account Services pages for information on getting a temporary Duo Bypass Code for a Day. (Duo Temporary Bypass codes require Identity Verification via Government ID, such as Driver’s License or Passport. Please have it handy.)

Helpful Links

Check Information Security Policies and Standards on the USC Trojan Secure Website

ITS Support 

  • The ITS Service Desk provides support to the USC community 24 hours a day, 365 days a year. 
  • Call (213) 740-5555 and choose option 2 to receive assistance. Please note that some requests may require a government ID for user verification.
  • Report an Issue on the ITS Service Portal.
  • Search for information on the ITS Service Portal.

How-to: Using Duo without Cellular Service or While Traveling

Duo provides offline authentication options for times when you lack cell service or when using multi-factor authentication (MFA) could cause you to incur extra cellphone charges, such as when traveling internationally.

NOTE: In order to take advantage of the options below, be sure to register your device(s) for use with your MFA account (including, if applicable, downloading and installing the Duo Mobile App on your smartphone) before you begin your travel.

Notes

  • Public wireless hotspots generally provide unsecure networks that could allow others to access your information. Make sure to use the USC VPN whenever you connect to USC systems via a public wireless connection, including hotel, convention center, and café wireless networks. Use of a VPN will protect your personal information by encrypting it over open networks. For more information about VPN, see itservices.usc.edu/vpn.
  • If you do not have access to a smartphone or tablet that you can use for MFA while traveling, please contact the ITS Customer Support Center for assistance.