With cyberattacks on the rise, multi-factor authentication is one of the best ways to protect your online accounts, by requiring two (or more) methods to verify your identity when logging in to systems.

These methods can include something you know, like a username and password, with something you have, like a smartphone app, to approve login requests.

After entering your username and password to log in to a Duo-protected application (such as CCA's accounts website), Duo will prompt you to verify the login from a device you've registered.

If you are NOT prompted to enroll in Duo automatically:

• Login to your account at https://accounts.cca.edu
• Click on Manage Password
• Select the Setup Two Factor Authentication option and complete the steps.

We strongly recommend downloading Duo's mobile application on a registered mobile device. Provided your device has internet connectivity, you need only respond to a Duo push notification to verify your logins. This provides the quickest, smoothest login experience.

Most online services at CCA are accessible through single sign-on (SSO) login. For the purposes of this guide, try accessing a system with a short timeout period, such as Portal.

If you are already authenticated for a system, you may have to log out and log back in again.

If you are NOT prompted to enroll in Duo automatically upon system login :

1. Login to your account at https://accounts.cca.edu
2. Click on Manage Password
3. Select the Setup Two Factor Authentication option and complete the steps

After entering your CCA login credentials, you should see a screen prompting you to register a new device to authenticate your logins via Duo. Select 'Start setup' to begin.

Select the type of device from the dropdown menu provided, then click 'Continue' to proceed.

We strongly recommend adding a mobile phone as your primary device type.

This guide walks through mobile phone registration, but you can follow Duo's enrollment guide for instructions on adding other types of devices.

This step is applicable for mobile phones and landlines.

1. Select your country from the dropdown list
   
2. Enter your device phone number
   
3. Check the confirmation box
   
4. Select 'Continue' to proceed
   
5. Select the phone type, then select 'Continue' to proceed (mobile phones only)

Duo will send you a device verification code to confirm ownership of your device.

1. Select 'Call me' to receive your verification code by phone or 'Text me' to receive it by text message
   
2. Enter your verification code in the box provided, then select 'Verify'
   
3. Click 'Continue' to proceed

Using the dropdown, select the type of device from the list provided, then click 'Continue' to proceed.

On the next screen you'll be prompted to install the Duo Mobile app.

1. If you need to install Duo Mobile, please do so:
   
   Download Duo Mobile for iOS
   Download Duo Mobile for Android
   
2. Once downloaded, open the Duo Mobile application on your registered device
   
3. Back in the CCA login screen, select 'I have Duo Mobile' to continue

Scan the Duo Mobile activation QR code by doing the following:

1. Open the Duo Mobile app on your registered device
   
2. Select '+ Add' (next to Accounts heading)
   
3. Select 'Use QR Code'
   
4. Hold your device camera up to the QR code, and await confirmation
   
5. From your device, rename the account if desired, then select 'Save'
   
6. Once activation is confirmed, select 'Continue' to proceed

Select how you authenticate logins with your registered device under 'When I log in.'

• By default, Duo will ask you to select your authentication method each time you need to authenticate.
  
• You may wish to select 'Automatically send this device a Duo Push' for your primary registered mobile device, which can save some time logging in.

You may adjust other settings here as well, such as:

• Customizing your device name
  
• Adding another device (refer back to step 5 as needed)
  

When you're finished adjusting settings, select 'Save' to proceed.

This option is available for mobile devices on which you have the Duo application downloaded and linked to your CCA account (see setup steps above for details).

1. From the Duo login prompt, select 'Send Me a Push'.
   
2. Approve or Deny the login attempt from your device.
   
3. Once approved on your registered device, your login attempt should proceed automatically.

And just like that, you're done! You're now set up for Duo and a more secure login experience.

This method is available for mobile devices and landlines. Note that CCA incurs a small charge for each phone call-based authentication attempt, so authenticating your logins by push notification is preferable!

1. From the Duo login prompt, select 'Call Me'.
   
2. Answer the resulting phone call on your registered device.
   
3. Follow voice prompts to approve or deny the login attempt by selecting the appropriate buttons from your device keypad.
   
4. Once approved, your login attempt should proceed automatically.

This method enables you to enter a temporary, unique passcode to authenticate your logins. Duo will send you a set of passcodes via SMS. Note that each passcode can only be used once and generated passcodes are only valid for 14 days.

Note that CCA incurs a small charge each time these messages are sent, so authenticating your logins by push notification is preferable!

1. From the Duo login prompt, select 'Enter a Passcode'.
   
2. If needed, select 'Text me new codes' to have Duo send a new set of valid login passcodes.
   
3. From your registered device, open your Duo-generated SMS containing your set of valid passcodes.
   
4. On the Duo login screen, click the dialog box, and enter a valid code.
   
5. Select 'Log In' to proceed.

If you lose your registered device for authenticating your logins, you may reach out to the Help Desk for assistance.

We recommend that you register a secondary device with Duo, just in case your primary device is lost, stolen, or broken.

If you did not attempt to log in to any CCA system but you have received a Duo login request to your registered device:

1. Deny the login request
2. Change your CCA password
3. Contact the CCA Help Desk to report the login attempt

One common reason for delayed or missing push notifications is that your device isn't connected to a cellular data or WiFi network.

If using WiFi, make sure that you are fully connected and, if necessary, signed in to the network (if you're on the CCA campus, you may need to register and/or log in in order to connect).

You will be locked out of your CCA account for 1 hour after 4 failed attempts to authenticate a login via Duo.

The lockout time increases to 90 minutes if you fail to authenticate your next login 4 more times. Lockout time increases to one day if you fail to authenticate 4 more times after that.

Upon successfully authenticating a login attempt, you'll be able to access your account, and the lockout times will reset.

If you will be changing your phone or SIM card for travel, we strongly encourage you to use one of the methods listed in this help article to avoid delays getting into your CCA account. For all of these options, you need to complete the steps PRIOR to leaving the country:

Managing Phone Changes in Your Duo Account

If your number remains the same between devices, you'll just need to download the Duo Mobile app on your new device and connect the app to your CCA account once more (see steps 7 and 8 above).

If your new device also has a new number associated with it, you'll need to re-register the device entirely.

If your old phone was your only registered device and you can no longer use it to verify your logins, you'll need to contact the Help Desk for assistance with registering your new phone.

To register your new phone as a secondary device, select 'Add a new device' on the Duo screen the next time you log in to a CCA system. Verify your identity using your primary registered device, then follow the setup prompts (from step 3 above).

For a single browser session, Duo authentication lasts for 48 hours, after which time you'll be prompted to authenticate when logging in to CCA systems.

Note that CCA systems have their own timeout periods as well, which may affect the frequency with which you are prompted to log in.

Due to reported issues with TouchID, CCA does not recommend using it as your primary authentication method.

Make sure you set up an alternative authentication method if you use TouchID for Duo logins.