MFA Equipment Options For DUO

Multi-Factor Authentication (MFA) works with many different devices. This page displays the different device options that are available to our users for use with MFA. To find out which option works best for you please explore the options below. Each device will list the types of authentication available and how easy they are to use.

Option 1: Smartphone Authentication Types:
- Duo Push – User receives a push notification; application prompts user to approve or deny login attempt.
- Passcode via Duo Mobile App – User opens the DUO mobile app and presses the Key button next to UCLA Logon to generate a one-time use passcode.
Ease of Use:
- Duo Push
  + Only requires an on-screen button press.
  – Requires a data/internet connection to receive the push notification.
- Passcode via Duo Mobile App
  + Does not require data/internet connection to generate a passcode.
  – User must navigate through app to produce a one-time use code, and then enter the code in the login window.
How to enroll this device?
- Smartphone Setup Instructions
Option 2: Tablet Authentication Types:
- Duo Push – User receives a push notification; application prompts user to approve or deny login attempt.
- Passcode via Duo Mobile App – User opens the DUO mobile app and presses the Key button next to UCLA Logon to generate a one-time use passcode.
Ease of Use:
- Duo Push
  + Only requires an on-screen button press.
  – Requires a data/internet connection to receive the push notification.
- Passcode via Duo Mobile App
  + Does not require data/internet connection to generate a passcode.
  – User must navigate through app to produce a one-time use code, and then enter the code in the login window.
How to enroll this device?
- Tablet Setup Instructions
Option 3: Duo Hardware Key Authentication Type:
- Passcode – User presses button on the hardware key to generate a passcode.
Ease of Use:
- Passcode
  + Good for travel. Small, portable device that can be attached to your keychain.
  + Simple button press generates a passcode.
  + Does not require data/internet access to generate a passcode.
  – User must manually enter code in the login window
  – User is required to have an additional device configured before the DUO key can be configured.
  – Device may be deactivated if button is pressed repeatedly.
  – Replacement cost could cost $20 or more. In most cases your department DTA may have a replacement to provide.
How to enroll this device?
- Please contact your DTA for setup assistance
Option 4: Yubi Key Authentication Type:
- U2F via USB – User plugs device into computer and touches metal contact to authenticate.
Ease of Use:
- U2F via USB
  + Good for travel. Small, portable device that can be attached to your keychain.
  + No passcode entry is required.
  + Device can be left connected to your computer.
  – Device cost: $50 to department or user.
  – User needs to be configured with another device before setting one up.
How to enroll this device?
- Please contact your DTA for setup assistance
https://humtech.ucla.edu/computing-support/mfa-equipment-options/#Option1Smartphone
https://ociso.ucla.edu/iamucla/mfa-at-ucla/activate-ucla-logon-mfa