myCSUSM
Duo Multi-Factor Authentication (MFA)
DUO multi-factor authentication (MFA) is an additional method of verifying your identity and protecting your information when you log into CSUSM sytems and websites.
All students, staff, and faculty accessing CSUSM systems and application are required to use multi-factor authentication.
- I Need to Set Up DUO
Self Service DUO setup is currently available for newly admitted students. Current Students, Staff and Faculty, please review the " I Need Help with DUO" information.
Step 1: Log in to your MyCSUSM
Step 2: Click on DUO Self Enrollment, located under Quick Links.
Step 3: Select Register Smartphone with app in the How do you want to enroll in MFA? menu.
Step 4: At the bottom of that screen, select the mobile phone number that you will use for DUO.
Step 5: Click Enroll
Step 6: Follow the instructions to download the DUO mobile phone app and enroll in DUO.
- How do I know if DUO is setup correctly?
If already enrolled, Log in to your MyCSUSM to the DUO self enrollment page. You will see this message. Click the “check DUO setup"
1. Send a push (recommended)
2. Push any key when responding to the phone call
3. Send enter a passcode:
If you get an error at any point in the process, please check additional information on this page or contact the help desk.
- I Got a New Phone and Need to Reset DUO
Please reach out to the Help Desk
Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
Email: helpdesk@csusm.edu (fac-staff)
Email: techsupport@csusm.edu (students)Phone: 760.750.4790
- I am Locked Out of DUO
If you're locked out of DUO, please wait 90 minutes and try logging in again. After 90 minutes have passed, if you are using DUO push and getting locked out, try to use the Passcode method instead.
- I Need Help with DUO
If you encounter any issues enrolling in Duo, including the error message above, please:
- fill out our DUO Identity Verification Form.
DUO Identity Verification Form
2. Once the form is submitted, our staff will review the submission and attempt to verify your identity using our verification tool. If successful, we will contact you using the provided email address to send updates regarding your request.
Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
Email: helpdesk@csusm.edu (fac-staff)
Email: techsupport@csusm.edu (students)Phone: 760.750.4790
- What To Do When You Receive An Unexpected DUO Request
Never approve an authentication request from DUO if you have not been attempting to log into a CSUSM or Microsoft resource. Depending on which type of authentication request you chose, these requests may come as push notifications, text messages or phone calls. Do not approve or accept any request for authentication if you did not do something to trigger that request.
If you receive a push notification not in conjunction with a login you initiated, you can report it directly from your mobile phone in the DUO app by selecting 'DENY.'
If you accidentally approved a push notification in either app or if you received an unexpected voice call from DUO, you should report these to the Fac/Staff Helpdesk, or call (760) 750-4790 immediately. In rare cases, this could be someone who is trying to gain access to your account with knowledge of your password.
If it is a one time request and you click ‘DENY,’ then you have stopped that access request. In Duo, click 'DENY' then click 'IT SEEMS FRAUDULENT.'
Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
Email: helpdesk@csusm.edu (fac-staff)
Email: techsupport@csusm.edu (students)Phone: 760.750.4790
More Information
- Where do I go to install the app on my Mobile Device?
- Do I need a smartphone to use Duo?
A smartphone is the easiest and most convenient way to use DUO, but If you have no smartphone, your smartphone is too old (iOS 10 and older or Android 5 and older), or you would prefer not to use your personal smartphone with the Duo Mobile app, you may request a hardware token (key fob) to use instead. Please make arrangements to go to the helpdesk to request a key fob. Make sure to bring your campus ID when you come to pick it up.
Faculty/Staff : helpdesk@csusm.edu
Students : techsupport@csusm.edu
- What Happens If I Lose or Forget My Phone?
If you lose your phone or suspect it has been stolen, contact the helpdesk immediately. The team can disable your phone from being able to authenticate with multi-factor authentication and can assist you with logging in with another method.
Chat: Helpdesk Teams Chat (Instructions on how to access via Microsoft Teams)
Email: helpdesk@csusm.edu (fac-staff)
Email: techsupport@csusm.edu (students)Phone: 760.750.4790
- How do I allow my Duo on my browser to remember me for 12 hours?
To avoid being prompted by Duo multiple times a day, select the checkbox next to Remember Me for 12 hours during log-in.
Due to some technical limitations on Remember Me for 12 hours:
-
It won’t carry over between different computers, or when switching between web browsers (from Chrome to Firefox, for example).
-
It may not carry over between different internet providers, campus services, if you block cookies, or are using Incognito mode.
-
- What if I need to change my phone number?
Please fill out this MFA Identity Verification Form. Once the form is submitted, our staff will review the submission and attempt to verify your identity using our verification tool. If successful, we will contact you using the provided email address to send updates regarding your request to modify MFA settings.
DUO Identity Verification Form
- What if I cannot scan the QR code?
If you are unable to scan the QR code for any reason, there is alternative way by sending a code to your CSUSM email:
1. When you are prompted in the CSUSM app, click "Take me to Duo mobile"
2. Next, you will be prompted to scan the QR code, but since you are on the mobile device and cannot scan it, click the link Email me an activation link instead.
3. Please input your CSUSM email address to send the code to. Once you receive that code, please input that code on the following screen. You will then have activated Duo!
- Duo gave me a prompt "We have detected some security issues with your device"
If you are getting prompted by Duo at the bottom of the Duo Mobile app, click "Fix Now"
It will show exactly what the issue is (below is an example of iOS being out of date)
Below explains the importance of updating the OS version of your phone to ensure attackers cannot exploit vulnerabilities.
- What if I don't have a cellular connection?
The DUO mobile app has a feature that will give you a special number to input for offline use.
- If you require assistance from an administrator
Please fill out this MFA Identity Verification Form. Once the form is submitted, our staff will review the submission and attempt to verify your identity using our verification tool. If successful, we will contact you using the provided email address to send updates regarding your request to modify MFA settings.
- If you travel outside of the United States
Travel to Cuba, Iran, North Korea, Sudan, Syria and the Crimea region of Ukraine
- You MUST uninstall DUO from any device that has DUO installed
- DO NOT take your DUO hardware token with you.
Traveling With DUO to non-sanctioned countries
Options: to use DUO:DUO mobile app: Most of the time, you can safely use the DUO mobile app on a smartphone or tablet. Even if you don’t have cell phone service or a Wi-Fi connection, the app can still generate a passcode. If possible, enroll a secondary device in case your primary device is unavailable. (NOTE: try to avoid taking your device(s) to a high risk country).
Hardware Token: If you are travelling without a smartphone or tablet, take your hardware token with you (unless you are travelling to a sanctioned country)
Generate passcodes: before travelling, generate 10 passcodes using your DUO mobile app so you have a backup option to log into your device. Make sure to keep these codes on your person and never leave them unattended with your device