Skip to Knowledge Base content

Enrolling in Two-Factor Authentication (2FA)

Duo two-factor authentication is most often used in conjunction with your smart phone or tablet. If you do not have a smart phone or tablet, you will need to contact the ITS Service Desk. Otherwise, follow the steps below to enroll in two-factor authentication and register your mobile device. You should complete the following
steps on a computer with your mobile device available.

To begin the enrollment process, point your web browser to In the Central
Authentication Service (CAS) screen, under Enroll in or Manage Two-Factor Authentication, enter
your NetID and NetPassword, then click Login.

On the Welcome screen, you are prompted to have your smart phone or tablet in hand. This is required for 2FA. Click Proceed if your have your smart phone or tablet.

You are prompted to confirm that you will proceed. Click Yes to proceed.

Click Add/Manage Device to add your device.

In the My Settings & Devices pop-up window, click Start setup.

Continuing in the My Settings & Devices window, choose what type of device to add, a mobile phone or a tablet. Select the radio button next to your choice. (Mobile phone is recommended.) After the selection is made, click Continue

In the My Settings & Devices window, enter your mobile device phone number. If the correct number is displayed under the number you enter, select the box next to the number and click Continue

Next you are prompted to choose what type of phone the number you entered is associated with by clicking the radio button next to your choice. Click Continue

If the Duo app is not currently on your mobile device, launch the App Store and search for “Duo Mobile”. Once found in the App Store, download and install the app at no cost. Once the app has successfully installed, click the I have Duo Mobile installed button.


NOTE: For Duo Mobile app installation instructions, see the related articles on this page.

To activate Duo Mobile, launch the Duo mobile app on your mobile device, tap the “+” button, and scan the QR code. Once the code is scanned, a green check appears in the QR code. Click Continue

We strongly recommend using the default value of “Ask me to choose an authentication method” on the “When I log in: “ parameter.  Click Close.

The final window welcomes you and gives you the opportunity to add another device. If you add another  device, follow the previous steps. If you have completed the enrollment, click Exit.

Now that you have enrolled in 2FA, when you login to a MSU system such as myState, you will enter your NetID and NetPassword as usual, and then a Duo screen will appear. The screen has two options Send Me a Push and Enter a Passcode. Normally you will click Send Me a Push. After selecting Send Me a Push, the Duo mobile app on your registered device will prompt you to approve or deny this login attempt. If this is a legitimate login using your NetID/NetPassword, you should approve; otherwise deny.