MFA Equipment Options For DUO

Multi-Factor Authentication (MFA) works with many different devices. This page displays the different device options that are available to our users for use with MFA. To find out which option works best for you please explore the options below. Each device will list the types of authentication available and how easy they are to use. If you would like a printable handout of this page please click here.

Option 1: Smartphone Authentication Types:
- Duo Push – User receives a push notification; application prompts user to approve or deny login attempt.
- Phone Call – User receives a call; automated message instructs user to press a number on the device to approve.
- Text Message (SMS) – User receives a text message with 10 passcodes. Each passcode can be used once. User chooses a passcode and enters it into the login window.
- Passcode via Duo Mobile App – User opens the DUO mobile app and presses the Key button next to UCLA Logon to generate a one-time use passcode.
Ease of Use:
- Duo Push
  + Only requires an on-screen button press.
  – Requires a data/internet connection to receive the push notification.
- Phone Call
  + Only requires an on-screen press after call is received.
  – Cellular reception is needed.
- Text Message (SMS)
  + Good for travel. After passcodes are received, data/internet access is not required.
  + Passcodes do not expire until after use.
  + Passcodes entered are tracked. User will be notified which passcode to use next.
  – Cellular reception is needed to receive codes.
  – User must manually enter passcode in login window.
  – User can have a maximum of 10 unused codes on hand. Whenever new codes are requested, all previous codes will expire.
  – Multiple steps are required to request codes. We recommend making an initial appointment with your DTA to familiarize yourself with the process.
- Passcode via Duo Mobile App
  + Does not require data/internet connection to generate a passcode.
  – User must navigate through app to produce a one-time use code, and then enter the code in the login window.
How to enroll this device?
- Smartphone Setup Instructions
Option 2: Tablet Authentication Types:
- Duo Push – User receives a push notification; application prompts user to approve or deny login attempt.
- Passcode via Duo Mobile App – User opens the DUO mobile app and presses the Key button next to UCLA Logon to generate a one-time use passcode.
Ease of Use:
- Duo Push
  + Only requires an on-screen button press.
  – Requires a data/internet connection to receive the push notification.
- Passcode via Duo Mobile App
  + Does not require data/internet connection to generate a passcode.
  – User must navigate through app to produce a one-time use code, and then enter the code in the login window.
How to enroll this device?
- Tablet Setup Instructions
Option 3: Landline Authentication Type:
- Phone Call – User receives a call; automated message instructs user to press a number on the device to approve.
Ease of Use:
- Phone Call
  + Only requires an on-screen press after call is received.
  – Cellular reception is needed.
How to enroll this device?
- Landline Setup Instructions
Option 4: Cellular Phone Authentication Types:
- Phone Call – User receives a call; automated message instructs user to press a number on the device to approve.
- Text Message (SMS) – User receives a text message with 10 passcodes. Each passcode can be used once. User chooses a passcode and enters it into the login window.
Ease of Use:
- Phone Call
  + Only requires an on-screen press after call is received.
  – Cellular reception is needed.
- Text Message (SMS)
  + Good for travel. After passcodes are received, data/internet access is not required.
  + Passcodes do not expire until after use.
  + Passcodes entered are tracked. User will be notified which passcode to use next.
  – Cellular reception is needed to receive codes.
  – User must manually enter passcode in login window.
  – User can have a maximum of 10 unused codes on hand. Whenever new codes are requested, all previous codes will expire.
  – Multiple steps are required to request codes. We recommend making an initial appointment with your DTA to familiarize yourself with the process.
How to enroll this device?
- Cellular Phone Setup Instructions
Option 5: Duo Hardware Key Authentication Type:
- Passcode – User presses button on the hardware key to generate a passcode.
Ease of Use:
- Passcode
  + Good for travel. Small, portable device that can be attached to your keychain.
  + Simple button press generates a passcode.
  + Does not require data/internet access to generate a passcode.
  – User must manually enter code in the login window
  – User is required to have an additional device configured before the DUO key can be configured.
  – Device may be deactivated if button is pressed repeatedly.
  – Replacement cost: $20.
How to enroll this device?
- Please contact your DTA for setup assistance
Option 6: Yubi Key Authentication Type:
- U2F via USB – User plugs device into computer and touches metal contact to authenticate.
Ease of Use:
- U2F via USB
  + Good for travel. Small, portable device that can be attached to your keychain.
  + No passcode entry is required.
  + Device can be left connected to your computer.
  – Device cost: $50 to department or user.
  – User needs to be configured with another device before setting one up.
How to enroll this device?
- Please contact your DTA for setup assistance
https://humtech.ucla.edu/computing-support/mfa-equipment-options/#Option1Smartphone
https://ociso.ucla.edu/iamucla/mfa-at-ucla/activate-ucla-logon-mfa