...
Option 1: Smartphone Authentication Types:
Duo Push – User receives a push notification; application prompts user to approve or deny login attempt.
Phone Call – User receives a call; automated message instructs user to press a number on the device to approve.
Text Message (SMS) – User receives a text message with 10 passcodes. Each passcode can be used once. User chooses a passcode and enters it into the login window.
Passcode via Duo Mobile App – User opens the DUO mobile app and presses the Key button next to UCLA Logon to generate a one-time use passcode.
Ease of Use:
Duo Push
+ Only requires an on-screen button press.
– Requires a data/internet connection to receive the push notification.Phone Call
+ Only requires an on-screen press after call is received.
– Cellular reception is needed.Text Message (SMS)
+ Good for travel. After passcodes are received, data/internet access is not required.
+ Passcodes do not expire until after use.
+ Passcodes entered are tracked. User will be notified which passcode to use next.
– Cellular reception is needed to receive codes.
– User must manually enter passcode in login window.
– User can have a maximum of 10 unused codes on hand. Whenever new codes are requested, all previous codes will expire.
– Multiple steps are required to request codes. We recommend making an initial appointment with your DTA to familiarize yourself with the process.Passcode via Duo Mobile App
+ Does not require data/internet connection to generate a passcode.
– User must navigate through app to produce a one-time use code, and then enter the code in the login window.
How to enroll this device?
Option 2: Tablet Authentication Types:
Duo Push – User receives a push notification; application prompts user to approve or deny login attempt.
Passcode via Duo Mobile App – User opens the DUO mobile app and presses the Key button next to UCLA Logon to generate a one-time use passcode.
Ease of Use:
Duo Push
+ Only requires an on-screen button press.
– Requires a data/internet connection to receive the push notification.Passcode via Duo Mobile App
+ Does not require data/internet connection to generate a passcode.
– User must navigate through app to produce a one-time use code, and then enter the code in the login window.
How to enroll this device?
Option 3: Landline Authentication Type:
Phone Call – User receives a call; automated message instructs user to press a number on the device to approve.
Ease of Use:
Phone Call
+ Only requires an on-screen press after call is received.
– Cellular reception is needed.
How to enroll this device?
Option 4: Cellular Phone Authentication Types:
Phone Call – User receives a call; automated message instructs user to press a number on the device to approve.
Text Message (SMS) – User receives a text message with 10 passcodes. Each passcode can be used once. User chooses a passcode and enters it into the login window.
Ease of Use:
Phone Call
+ Only requires an on-screen press after call is received.
– Cellular reception is needed.Text Message (SMS)
+ Good for travel. After passcodes are received, data/internet access is not required.
+ Passcodes do not expire until after use.
+ Passcodes entered are tracked. User will be notified which passcode to use next.
– Cellular reception is needed to receive codes.
– User must manually enter passcode in login window.
– User can have a maximum of 10 unused codes on hand. Whenever new codes are requested, all previous codes will expire.
– Multiple steps are required to request codes. We recommend making an initial appointment with your DTA to familiarize yourself with the process.
How to enroll this device?
Option 5: Duo Hardware Key Authentication Type:
Passcode – User presses button on the hardware key to generate a passcode.
Ease of Use:
Passcode
+ Good for travel. Small, portable device that can be attached to your keychain.
+ Simple button press generates a passcode.
+ Does not require data/internet access to generate a passcode.
– User must manually enter code in the login window
– User is required to have an additional device configured before the DUO key can be configured.
– Device may be deactivated if button is pressed repeatedly.
– Replacement cost: $20.
How to enroll this device?
Please contact your DTA for setup assistance
Option 6: Yubi Key Authentication Type:
U2F via USB – User plugs device into computer and touches metal contact to authenticate.
Ease of Use:
U2F via USB
+ Good for travel. Small, portable device that can be attached to your keychain.
+ No passcode entry is required.
+ Device can be left connected to your computer.
– Device cost: $50 to department or user.
– User needs to be configured with another device before setting one up.
How to enroll this device?
Please contact your DTA for setup assistance
https://humtech.ucla.edu/computing-support/mfa-equipment-options/#Option1Smartphone
https://ociso.ucla.edu/iamucla/mfa-at-ucla/activate-ucla-logon-mfa