Duo Standard Prompt
When logging into a website that utilizes Two Factor Authentication, users will first login using their CSU credentials.
![NetID Login Page, prompting users to enter their CSU NetID and NetID password](/duo-two-factor-authentication/_img/netid-login-final1.png)
Upon logging in, the Duo prompt will populate allowing users to choose how to verify their identity.
![Duo Two Factor Authentication Prompt on mobile device](/duo-two-factor-authentication/_img/duo-required-mobile-final.jpg)
If more than one device was registered, make sure to select the one you want to use for this session from the Device dropdown menu.
![Duo Prompt Device Drop down menu](/duo-two-factor-authentication/_img/duo-auth-drop-down-system.png)
Duo Universal Prompt
The Duo Universal Prompt is being rolled out to Duo-protected applications in phases, the first implementation is with the GlobalProtect VPN.
When accessing the GlobalProtect VPN, the user will first enter their NetID (netid@colostate.edu) and password.
Duo will then automatically select their default authentication method. The image below shows a user who has Duo Push as their default method.
![Duo Universal Prompt](/duo-two-factor-authentication/_img/microsoftteams-image-7.png)
To use a different authentication method, click “Other options”, which will display all other devices you have set up.
![login options](/duo-two-factor-authentication/_img/6gpauthselection-e1690929845497.png)
Once you have authenticated with your selected method, you will be logged in to the application.
Options for Duo Authentication:
- Send Me a Push – Using the Duo Mobile App
- Easiest, fastest method
- Enter a Passcode – Using the Duo Mobile App
- Great when you’re outside of cellular reception
- Call Me – Using any Registered Phone Number
- Least reliable option, use only when necessary
Expand the sections below for details on what to expect when you authenticate with each method.