This site requires JavaScript to be enabled
An updated version of this article is available

DUO 2-Step Authentication

262 views

6.0 - Updated on 07-16-2025 by Joseph Dickson (jedickson)

5.0 - Updated on 09-13-2024 by Joseph Dickson (jedickson)

4.0 - Updated on 11-08-2023 by Joseph Dickson (jedickson)

3.0 - Updated on 11-07-2023 by Joseph Dickson (jedickson)

2.0 - Updated on 11-07-2023 by Joseph Dickson (jedickson)

1.0 - Authored on 07-31-2018 by Marcy Gates (mgates)

The 2-Step Authentication process (also referred to as MFA - Multi-Factor Authentication) is used to verify your identity by requiring a BroncoPassword and passcode before access is given to an application or computer system.  The passcode can be sent to your mobile phone or hardware token.  The current service choice for the 2 Step Authentication process is called DUO.  For more info on how 2-Step Authentication works, including supported devices and common issues, see DUO's Guide to 2-Step Authentication at https://guide.duo.com.

Self-Registering for first-time 2-Step Authentication

  1. Access CPP's 2-Step authentication enrollment site https://apps.cpp.edu/2step/enroll.
    1. Log in using your BroncoName and BroncoPassword.
  2. Follow the on screen steps to complete your enrollment. In order to complete the enrollment process you will need to download the Duo app. See Step 2.

CAUTION:  The DUO mobile app authenticates based on a specific hardware device information.  Adding additional devices to DUO, or the call-back feature, requires that you authenticate with DUO using a device DUO already has assigned to your account.  

Download the DUO App

  1. Download the DUO mobile app to your mobile device from the Apple App Store (iOS version 11.0 or above) or GooglePlay store (Android version 7.0 or above).
  2. Tap to open the DUO app after it has been installed.
  3. Tap the plus (+) sign in the upper right corner.
  4. Display the DUO authentication prompt in a browser 
    1. Open a new browser session and
    2. Go to MyCPP: https://my.cpp.edu. which should prompt the DUO authentication prompt.  The DUO prompt will only appear if there are no open browser sessions that were recently authenticated by DUO.  
  5. Select "Add a new device"
  6. Scan the QR code provided in the MyCPP "Link your smartphone/tablet" window to link it with DUO.

    Note: If you are unable to scan the QR code, click the alternate activation links provided on the the "Link your smartphone/tablet" window (see instructions above for "Self-Registering for 2-Step Authentication").

  7. For first time users, when the app activation has been completed, click the "Enable Two Step" button to enable DUO onto your Bronco Account.
    1. You should see a confirmation window, letting you know that DUO 2-Step Verification has been successfully activated on your Bronco Account.

Note: Once 2-Step Authentication is activated with DUO, users will be required to provide the BroncoPassword and the DUO Passcode when logging into campus applications and computer systems.

Refer to DUO's Guide to Adding a new device:  https://guide.duo.com/add-device.   For more info on supported devices and common issues, see DUO's Guide to 2-Step Authentication at https://guide.duo.com. 

CAUTION:  The DUO mobile app authenticates based on a specific hardware device information.  Adding additional devices to DUO, or the call-back feature, requires that you authenticate with DUO using a device DUO already has assigned to your account.  

Using a Hardware Token to Log In and Authenticate

Submit 2-Step Authentication Token Request Form request a Hardware Token for use with Duo.

  1. Display the DUO authentication prompt.  
    1. Open a new browser session and
    2. Go to MyCPP: https://my.cpp.edu. which should prompt the DUO authentication prompt.  The DUO prompt will only appear if there are no open browser sessions that were recently authenticated by DUO.  
  2. Log in using your BroncoName and BroncoPassword.
  3. A CPP DUO window will appear:
    1. Select “Enter a passcode”.
  4. On the DUO hardware token that was provided to you by the IT Service Desk:
    1. Press the button to receive a pass-code token.
    2. A set of six numbers will be displayed in the window of the hardware token.
  5.  Enter the numbers displayed on the hardware token into the CPP DUO window.
    1.  Click Login.
  6. Your login process is now complete.

Note: Once 2-Step Verification is activated with DUO, users will experience a slightly different login experience when logging into campus applications and computer systems.

Frequently-Asked Questions (FAQs)

Q. Can I enroll/add more than one device or phone number?

A. Yes. In fact, we recommend adding more than one device or phone number in case a device is lost or damaged.

You can also add the call-back feature – this authenticates using a phone number – regardless of the device.  See instructions above for "Adding an Additional Mobile Device to DUO 2-Step Authentication".

NOTE: DUO authenticates based on a specific hardware device.  Adding another device to DUO requires that you authenticate with DUO using a device DUO already has assigned to you.  

Q. How do I transfer DUO to a new mobile device?

A. BEFORE disabling DUO on the old device, either enable DUO on the new device or use the DUO Restore feature to transfer DUO. DUO provides a restore feature using a back up of your device and authentication "keys".  See instructions for DUO Restore: https://guide.duo.com/duo-restore.

CAUTION:  When you get a new device, DUO authentication needs to be added to the device BEFORE disabling it on the old device. DUO authenticates based on a specific hardware device.  Adding another device to DUO requires that you authenticate with DUO using a device DUO already has assigned to you.

Q. What does the Duo authentication prompt look like?

A. CPP's Duo Universal Authentication prompt as of November 2023 is pictured below.

Duo Universal authentication prompt for Cal Poly Pomona

Troubleshooting

If after reading the DUO Common Issues page you still have questions and/or are having problems with using MFA, contact the IT Service Desk.  If you can’t log an IT Service Desk ticket, stop by the IT Service Desk so we can better assist you.  For location and hours of operation, see IT Service Desk Contact Information page.

 

Additional Resources

 

Last modified 11-08-2023 10:51:18 AM