The 2-Step Authentication process (also referred to as MFA - Multi-Factor Authentication) is used to verify your identity by requiring a BroncoPassword and passcode before access is given to an application or computer system. For more info on how 2-Step Authentication works, including supported devices and common issues, see DUO's Guide to 2-Step Authentication at https://guide.duo.com.
Self-Registering for first-time 2-Step Authentication
- Access CPP's 2-Step authentication enrollment site https://apps.cpp.edu/2step/enroll.
- Log in using your BroncoName and BroncoPassword.
- Follow the on screen steps to complete your enrollment. In order to complete the enrollment process you will need to download the Duo app. See Step 2.
CAUTION: The DUO mobile app authenticates based on a specific hardware device information. Adding additional devices to DUO, or the call-back feature, requires that you authenticate with DUO using a device DUO already has assigned to your account.
Download the DUO App
- Download the DUO mobile app to your mobile device from the Apple App Store (iOS version 11.0 or above) or GooglePlay store (Android version 7.0 or above).
- Tap to open the DUO app after it has been installed.
- Tap "+ Add" to add a new account to DUO.
- Display the DUO authentication prompt in a browser
- Open a new browser session and
- Go to MyCPP: https://my.cpp.edu. which should prompt the DUO authentication prompt. The DUO prompt will only appear if there are no open browser sessions that were recently authenticated by DUO.
- Select "Add a new device"
- Scan the QR code provided in the MyCPP "Link your smartphone/tablet" window to link it with DUO.
Note: If you are unable to scan the QR code, click the alternate activation links provided on the the "Link your smartphone/tablet" window (see instructions above for "Self-Registering for 2-Step Authentication"). - For first time users, when the app activation has been completed, click the "Enable Two Step" button to enable DUO onto your Bronco Account.
- You should see a confirmation window, letting you know that DUO 2-Step Verification has been successfully activated on your Bronco Account.
Note: Once 2-Step Authentication is activated with DUO, users will be required to provide the BroncoPassword and the DUO Passcode when logging into campus applications and computer systems.
Refer to DUO's Guide to Adding a new device: https://guide.duo.com/add-device. For more info on supported devices and common issues, see DUO's Guide to 2-Step Authentication at https://guide.duo.com.
CAUTION: The DUO mobile app authenticates based on a specific hardware device information. Adding additional devices to DUO, or the call-back feature, requires that you authenticate with DUO using a device DUO already has assigned to your account.
Using a Hardware Token to Log In and Authenticate
Submit 2-Step Authentication Token Request Form request a Hardware Token for use with Duo.
- Display the DUO authentication prompt.
- Open a new browser session and
- Go to MyCPP: https://my.cpp.edu. which should prompt the DUO authentication prompt. The DUO prompt will only appear if there are no open browser sessions that were recently authenticated by DUO.
- Log in using your BroncoName and BroncoPassword.
- A CPP DUO window will appear:
- Select “Enter a passcode”.
- On the DUO hardware token that was provided to you by the IT Service Desk:
- Press the button to receive a pass-code token.
- A set of six numbers will be displayed in the window of the hardware token.
- Enter the numbers displayed on the hardware token into the CPP DUO window.
- Click Login.
- Your login process is now complete.
Note: Once 2-Step Verification is activated with DUO, users will experience a slightly different login experience when logging into campus applications and computer systems.
Frequently-Asked Questions (FAQs)
Account-Related
Q. Can I enroll/add more than one device or phone number?
A. Yes. In fact, we recommend adding more than one device or phone number in case a device is lost or damaged.
You can also add the call-back feature – this authenticates using a phone number – regardless of the device. See instructions above for "Adding an Additional Mobile Device to DUO 2-Step Authentication".
NOTE: DUO authenticates based on a specific hardware device. Adding another device to DUO requires that you authenticate with DUO using a device DUO already has assigned to you.
Q. How do I transfer DUO to a new mobile device?
A. BEFORE disabling DUO on the old device, either enable DUO on the new device or use the DUO Restore feature to transfer DUO. DUO provides a restore feature using a back up of your device and authentication "keys". See instructions for DUO Restore: https://guide.duo.com/duo-restore.
CAUTION: When you get a new device, DUO authentication needs to be added to the device BEFORE disabling it on the old device. DUO authenticates based on a specific hardware device. Adding another device to DUO requires that you authenticate with DUO using a device DUO already has assigned to you.
Q. What does the Duo authentication prompt look like?
A. CPP's Duo Universal Authentication prompt as of July 2025 is pictured below.
Q: How was Duo selected? Is it secure?
A: DUO was selected based on its security controls, accessibility options for persons with disabilities, as well as its ability to be used with a variety of applications and technical environments. It was chosen by the CSU, and CPP is one of many campuses implementing it.
Q: Am I required to use my personal device to use DUO? Are there other options?
A: CPP provides three options for 2-Step Authentication: the DUO smartphone application, a call-back phone number or a hardware token. If you are uncomfortable or cannot use your own device with the smartphone application or call-back option, you can request a hardware token by contacting the IT Service Desk. Allow 7-10 days for token request to be delivered from date of request.
Q: Is my personal information safe?
A: Cal Poly Pomona takes seriously the security of your information, including protecting the confidentiality, integrity and availability of campus information. 2-Step Authentication, also called multi-factor authentication, has become a best practice for many industries to improve the security of information technology, data and user accounts. Additionally, any information technology application or service purchased by the CSU and the campus must comply with the CSU terms and conditions including CSU general provisions for information technology acquisitions and references to data confidentiality and security of information.
Q: Is DUO a reliable service? is there a risk that I won't have timely access to my education or work?
A: DUO is a reliable and secure service for 2-Step Authentication. There are multiple methods and contingencies in the event that you lose access to your primary 2-Step Authentication device.
- You are encouraged to enroll more than one device or method in 2-Step Authentication. For example, in addition to enrolling your smartphone, also enroll a tablet or register for a call-back to a phone number.
- DUO offers ways to securely use backup features on your device and instantly restore the application from one device to another.
- The IT Service Desk can provide one-time use-codes during normal operating hours.
Q: Is using DUO or 2-Step Authentication a violation of my privacy?
A: Cal Poly Pomona respects your privacy and is committed to protecting it to the extent possible, subject to applicable state and federal law, through compliance with privacy policies and this Privacy Notice. Although our university is a not-for-profit institution and not governed by the California Consumer Privacy Act (CCPA), we generally operate within the spirit of the act. Additionally, any information technology application or service purchased by the CSU and the campus must comply with the CSU terms and conditions including CSU general provisions for information technology acquisitions and references to data confidentiality and security of information.
Q: Can I use a Mac (MacOS) or a Chromebook as an authentication device?
A: No, not at this time. Currently, the campus is supporting IOS and Android as authentication devices, as well as the phone number Call Back feature and a campus-provided hardware token.
Q: Will 2-Step Authentication be available when I travel?
A: Yes. The Duo application works like any other smartphone app abroad. With Wi-Fi or cellular connectivity, you will continue to receive DUO push notifications. The Duo application can also generate a 6 digit "passcode", which does NOT require cellular or internet connectivity. Additionally, if you use a Hardware token, the Hardware token generates a passcode, which requires no internet connectivity. A hardware token can be requested at the IT Service Desk.
Q: What option do I have if my smartphone does not support the DUO mobile app?
A: Additional options are available for 2-Step authentication.
- Phone call, Duo will call you at the phone number of your choice. It can be a land-line or cell phone number. If this is your primary method of authentication, it should be a phone that is always nearby.
- Hardware token, which can be requested by contacting the IT Service Desk.
- Add a tablet you can enroll more than one device.
- Supported iOS, iPadOS, and Android devices can generate a passcode, which does NOT require cellular or internet connectivity.
Q: How can I reduce the number of times 2-Step prompts me to authenticate?
A: DUO provides a remember me feature allowing your 2-step authentication to be remembered for a period of time. At CPP, you can be remembered for up to 14 hours when that feature is checked. Remember me requires the use of cookies and is per browser. So, if you clear or can’t save cookies, then Duo is unable to remember and you will be prompted each time.
Troubleshooting
If after reading the DUO Common Issues page you still have questions and/or are having problems with using MFA, contact the IT Service Desk. If you can’t log an IT Service Desk ticket, stop by the IT Service Desk so we can better assist you. For location and hours of operation, see IT Service Desk Contact Information page.
Video Resources
Additional Resources
- External: Duo Guide to Two-Factor Authentication
- Claiming Your BroncoAccount and 2-Step Authentication