Need Help?

Skip to Content

CCA Portal

Enroll in Duo for More Secure Logins

Last updated on Nov 29, 2023

Before you begin

Duo multi-factor authentication helps secure your online accounts and information by having you confirm whether a login attempt is valid or not.

Faculty, staff and students are required to enroll in Duo and will automatically be prompted to enroll the first time logging into any CCA system.

Follow the steps below to complete enrollment.

About multi-factor authentication

What is multi-factor authentication, and why is it important?

With cyberattacks on the rise, multi-factor authentication is one of the best ways to protect your online accounts, by requiring two (or more) methods to verify your identity when logging in to systems.

These methods can include something you know, like a username and password, with something you have, like a smartphone app, to approve login requests.

How will Duo change my login experience?

After entering your username and password to log in to a Duo-protected application (such as CCA's accounts website), Duo will prompt you to verify the login from a device you've registered.

If you are NOT prompted to enroll in Duo automatically:

We strongly recommend downloading Duo's mobile application on a registered mobile device. Provided your device has internet connectivity, you need only respond to a Duo push notification to verify your logins. This provides the quickest, smoothest login experience.

Two-Factor Authentication Summary Infographic

Register a device for logins

The following instructions describe how to complete Duo enrollment by:

  • Logging into a CCA system from a desktop computer
  • Registering a mobile phone with Duo to authenticate the desktop login attempt

1 Log in to an SSO-protected system using your CCA credentials

Most online services at CCA are accessible through single sign-on (SSO) login. For the purposes of this guide, try accessing a system with a short timeout period, such as Portal.

If you are already authenticated for a system, you may have to log out and log back in again.

If you are NOT prompted to enroll in Duo automatically upon system login :

  1. Login to your account at
  2. Click on Manage Password
  3. Select the Setup Two Factor Authentication option and complete the steps

2 Select 'Start setup" from the Duo welcome screen

After entering your CCA login credentials, you should see a screen prompting you to register a new device to authenticate your logins via Duo. Select 'Start setup' to begin.

3 Select device type

Select the type of device from the dropdown menu provided, then click 'Continue' to proceed.

We strongly recommend adding a mobile phone as your primary device type.

This guide walks through mobile phone registration, but you can follow Duo's enrollment guide for instructions on adding other types of devices.

We DO NOT RECOMMEND selecting TouchID unless it is added as a second device. TouchID only works on a laptop equipped with TouchID, and when using the browser. There are some situations where TouchID will not work, such as when logging in on your phone or when logging into CCA VPN. If you would like to use TouchID, be sure that you also have a mobile phone set up with your Duo account to use when TouchID is not an option.

4 Enter your phone number

This step is applicable for mobile phones and landlines.

  1. Select your country from the dropdown list
  2. Enter your device phone number
  3. Check the confirmation box
  4. Select 'Continue' to proceed
  5. Select the phone type, then select 'Continue' to proceed (mobile phones only)

5 Confirm ownership of your device

Duo will send you a device verification code to confirm ownership of your device.

  1. Select 'Call me' to receive your verification code by phone or 'Text me' to receive it by text message
  2. Enter your verification code in the box provided, then select 'Verify'
  3. Click 'Continue' to proceed

6 Select your device platform

Using the dropdown, select the type of device from the list provided, then click 'Continue' to proceed.

7 Install the Duo Mobile app

On the next screen you'll be prompted to install the Duo Mobile app.

  1. If you need to install Duo Mobile, please do so:

    Download Duo Mobile for iOS
    Download Duo Mobile for Android
  2. Once downloaded, open the Duo Mobile application on your registered device
  3. Back in the CCA login screen, select 'I have Duo Mobile' to continue
Duo Mobile download QR codes

Duo Mobile may not be available for download everywhere. Make sure to download the application while on campus or elsewhere in the U.S.

8 Activate Duo Mobile for CCA logins

Scan the Duo Mobile activation QR code by doing the following:

  1. Open the Duo Mobile app on your registered device
  2. Select '+ Add' (next to Accounts heading)
  3. Select 'Use QR Code'
  4. Hold your device camera up to the QR code, and await confirmation
  5. From your device, rename the account if desired, then select 'Save'
  6. Once activation is confirmed, select 'Continue' to proceed

If you are unable to scan the QR code provided, you can select 'Email me an activation link instead,' then follow the instructions.

9 Choose how Duo notifies your device to authenticate logins

Select how you authenticate logins with your registered device under 'When I log in.'

  • By default, Duo will ask you to select your authentication method each time you need to authenticate.
  • You may wish to select 'Automatically send this device a Duo Push' for your primary registered mobile device, which can save some time logging in.

You may adjust other settings here as well, such as:

  • Customizing your device name
  • Adding another device (refer back to step 5 as needed)

When you're finished adjusting settings, select 'Save' to proceed.

Authenticate your login attempt with Duo

After entering your username and password to log in to a Duo-protected application (such as CCA's accounts website), Duo will prompt you to verify the login from a device you've registered.

If you have more than one registered device, you can select which device you'd like to use to authenticate your login.

Depending on your device type and default Duo notification settings (see step 9 above), you'll be able to choose from a number of supported authentication methods. The available authentication methods for mobile devices can be found below:

Authenticate via push notification

This option is available for mobile devices on which you have the Duo application downloaded and linked to your CCA account (see setup steps above for details).

  1. From the Duo login prompt, select 'Send Me a Push'.
  2. Approve or Deny the login attempt from your device.
  3. Once approved on your registered device, your login attempt should proceed automatically.

And just like that, you're done! You're now set up for Duo and a more secure login experience.

Authenticate via phone call

This method is available for mobile devices and landlines. Note that CCA incurs a small charge for each phone call-based authentication attempt, so authenticating your logins by push notification is preferable!

  1. From the Duo login prompt, select 'Call Me'.
  2. Answer the resulting phone call on your registered device.
  3. Follow voice prompts to approve or deny the login attempt by selecting the appropriate buttons from your device keypad.
  4. Once approved, your login attempt should proceed automatically.

Authenticate via passcode

This method enables you to enter a temporary, unique passcode to authenticate your logins. Duo will send you a set of passcodes via SMS. Note that each passcode can only be used once and generated passcodes are only valid for 14 days.

Note that CCA incurs a small charge each time these messages are sent, so authenticating your logins by push notification is preferable!

  1. From the Duo login prompt, select 'Enter a Passcode'.
  2. If needed, select 'Text me new codes' to have Duo send a new set of valid login passcodes.
  3. From your registered device, open your Duo-generated SMS containing your set of valid passcodes.
  4. On the Duo login screen, click the dialog box, and enter a valid code.
  5. Select 'Log In' to proceed.

Check the 'Remember me' box on the authentication method selection screen to stay authenticated in Duo for longer.


What do I do if I lose my registered device?

If you lose your registered device for authenticating your logins, you may reach out to the Help Desk for assistance.

We recommend that you register a secondary device with Duo, just in case your primary device is lost, stolen, or broken.

What should I do if I receive a Duo login request that didn't come from me?

If you did not attempt to log in to any CCA system but you have received a Duo login request to your registered device:

  1. Deny the login request
  2. Change your CCA password
  3. Contact the CCA Help Desk to report the login attempt

Why aren't my Duo push notifications coming through to my registered phone?

One common reason for delayed or missing push notifications is that your device isn't connected to a cellular data or WiFi network.

If using WiFi, make sure that you are fully connected and, if necessary, signed in to the network (if you're on the CCA campus, you may need to register and/or log in in order to connect).

I locked myself out of my account. What do I do?

You will be locked out of your CCA account for 1 hour after 4 failed attempts to authenticate a login via Duo.

The lockout time increases to 90 minutes if you fail to authenticate your next login 4 more times. Lockout time increases to one day if you fail to authenticate 4 more times after that.

Upon successfully authenticating a login attempt, you'll be able to access your account, and the lockout times will reset.

I am leaving the country and changing phones or SIM cards when I do. How do I retain access to my CCA account?

If you will be changing your phone or SIM card for travel, we strongly encourage you to use one of the methods listed in this help article to avoid delays getting into your CCA account. For all of these options, you need to complete the steps PRIOR to leaving the country:

Managing Phone Changes in Your Duo Account

I replaced my registered mobile phone with a new one. Do I need to do anything for Duo?

If your number remains the same between devices, you'll just need to download the Duo Mobile app on your new device and connect the app to your CCA account once more (see steps 7 and 8 above).

If your new device also has a new number associated with it, you'll need to re-register the device entirely.

If your old phone was your only registered device and you can no longer use it to verify your logins, you'll need to contact the Help Desk for assistance with registering your new phone.

To register your new phone as a secondary device, select 'Add a new device' on the Duo screen the next time you log in to a CCA system. Verify your identity using your primary registered device, then follow the setup prompts (from step 3 above).

How long does my Duo authentication last?

For a single browser session, Duo authentication lasts for 48 hours, after which time you'll be prompted to authenticate when logging in to CCA systems.

Note that CCA systems have their own timeout periods as well, which may affect the frequency with which you are prompted to log in.

Can I use TouchID as my primary authentication method?

Due to reported issues with TouchID, CCA does not recommend using it as your primary authentication method.

Make sure you set up an alternative authentication method if you use TouchID for Duo logins.