Installing Duo to Use Two-Factor Authentication

Installing Duo to Use Two-Factor
Authentication
Information for SIM PCMH Users of the MDC Portal
► PROCEDURAL GUIDE
Introduction
The University of Michigan Health System (UMHS) requires that all users who connect to our sponsored
services using a Virtual Private Network (VPN) use a two-factor authentication system called Duo. This
requirement applies to all users of the MDC Portal.
Two-factor authentication is a second layer of security to ensure that your account remains secure even if
your passwords are compromised. After you log in to the UMHS VPN, you will receive either a Duo
notification on your cell phone or tablet or a phone call on your cell phone or land line to verify that the
person logging in is you.
Overview of the Steps
The following steps are detailed in this guide:
1. Access the computer and the mobile phone, tablet, or landline phone that you will use for login.
2. Locate your MDC Portal login information.
3. Select your Duo authentication method.
4. Download the Duo application on your smartphone or tablet.
NOTE: You do not need to complete this step if you select a phone call as your authentication option.
5. Register your device with UMHS.
6. Log in to the MDC Portal.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 1 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
Step 1: Access Your Computer and Authentication Device
Access the computer you will use to log in to the MDC Portal and the mobile phone, tablet, or land line that
you will have with you each time you log in to the MDC Portal.
Step 2: Locate Your MDC Portal Login Information
 If your name was included in the initial list from your participating organization for access to the MDC
Portal, you will receive an email with the following information:
- UM uniqname (username)
- UM Level-1 password
- UM Level-2 password
You will use this login information each time you log in to the SIM PCMH Project Site.
 If you have NOT yet received your login information, please contact MDC at MDCAccounts@med.umich.edu.
 If you have received your login information, but your passwords have expired or you have other
questions, please contact the Health Information Technology and Services (HITS) Service Desk at 734936-8000.
NOTES:
 You will not be able to continue the steps in this guide until you have a valid username and passwords.
 The authentication method you select will be used each time you log in, unless you modify your
selection again using the steps in this guide.
 The device you use for two-factor authentication must be with you each time you log in to the MDC
Portal.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 2 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
Step 3: Select Your Duo Authentication Method
After you log in with your Level-1 password, the Duo application will contact you on a separate device
(cannot be the computer you are logging in on) to confirm that it is you who is logging in. The table below
provides the options you can select and a brief description of how each option works.
Option
Description
Duo Mobile push
notification
 Requires that you install the Duo Mobile application on your smartphone
or tablet.
 Your smartphone or tablet must be connected to the Wi-Fi or to your
cellular service.
How it works
After you log in to the UMHS VPN with your UM username and Level-1
password on your computer, you will receive a notification on your
smartphone or tablet (via the Duo Mobile app) to accept the login request.
You must accept the request to continue the login process. On your computer,
you will then log in to the MDC Portal using your UM username and Level-2
password.
Phone call to either
mobile phone or
landline
Select this method if you do not have a smart phone or a data service, or if you
do not want to use your personal phone.
How it works
After you log in to the UMHS VPN using your UM username and Level-1
password on your computer, you will receive a phone call at the phone
number you registered. You will accept the request by pressing “1.” On your
computer, you will then log in to the SIM PCMH Project Site using your UM
username and Level-2 password.
Notes:
 If you select this method, you do not need to download the Duo App. Skip
to Step 5 in this guide.
 If you select this method, you need to call the HITS Service Desk after you
register your device (Step 5). For more information, see Important
Information for Using Phone Call Authentication.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 3 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
Step 4: Download the Duo App
If you are using your smartphone or tablet to receive a Due Mobile push notification, complete the steps in
this section to download the Duo application.
If you want to receive a phone call for authentication, you do not need to complete these steps. Go to Step
5: Register Your Device with UMHS.
NOTES
 Duo Mobile is a free application.
 Duo Mobile requires approximately 32 MB of internal storage on an Android device and less than 10 MB
on an iPhone.
 Duo Mobile requires notification access and camera access on your device. The camera access is only
used to scan a code as part of the activation process.
Steps for iPhone or iPad
1. On an iPhone, launch the App Store, or on an iPad, tap iPhone Apps at the top of the screen.
NOTE: Duo is available only for iOS versions 7 and higher.
2. Search for "Duo Mobile."
3. Tap Get and then Install to download the app.
Steps for Android Smartphone or Tablet
1. On your Android smartphone or tablet, launch the Google Play Store app.
NOTES:
- Duo is available only for Android OS versions 4 and higher.
- If you are prompted to add a credit card number, you can dismiss this request.
2. Search for "Duo Mobile."
3. Tap Install to install the app.
Steps for Windows Phone
1. Search for "Duo Mobile" in the Windows Store.
2. Tap Install to install the app.
Steps for Blackberry Phone
1. Search for "Duo Mobile" in BlackBerry World.
2. Tap Download to install the app.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 4 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
Step 5: Register Your Device with UMHS
Regardless of the authentication method you select, you need to register the device (mobile phone, tablet,
or landline) with UMHS to receive your authentication notices. The steps in this section will guide you
through the registration process.
From your computer, complete the following steps:
1. Navigate to the following site: https://password.it.umich.edu/pwm/public/.
2. Click Login in the upper-right corner.
3. Enter your UM username and Level-1 password.
4. Select the Two-Factor (Duo) tab.
5. Click Manage Services.
6. Click Start setup.
7. If you are adding a mobile phone or tablet, go to Adding a Mobile Phone or Tablet.
If you are adding a landline, go to Adding a Landline.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 5 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
Adding a Mobile Phone or Tablet
Complete these steps if you want to receive a Duo push notification on your mobile phone or tablet.
1. Select one of the following options to enroll your device, and then click Continue.
- Mobile phone
- Tablet
2. Enter your device's phone number.
NOTE: The phone number steps will automatically skip for tablet users.
3. Click the checkbox to verify the number, and then click Continue.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 6 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
4. Select your device's operating system, and then click Continue.
5. Click I have Duo Mobile installed.
6. Open the Duo Mobile app on your device.
7. Use the Duo Mobile app’s built-in barcode scanner to scan the barcode on screen, and then click
Continue.
NOTE: If you have a Blackberry OS smartphone, you will not use a barcode scanner. Instead, enter
your email address as prompted on the screen and click Send Email. On your phone, open the email
message and click the activation link.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 7 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
8. In the When I log in field, select Automatically send this device a Duo Push.
Adding a Landline
Complete these steps if you want to receive a phone call notification on your landline or mobile phone.
1. For What type of device are you adding?, select Landline, and then click Continue.
2. Enter your phone number.
3. If applicable, add the extension.
4. Click the checkbox to verify the number, and then click Continue.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 8 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
5. To verify ownership, click Call Me.
6. Duo will automatically call the number and provide a 6-digit code.
7. Enter the 6-digit code, and then click Continue.
8. In the When I log in field, select Automatically call this device.
Important Information for Using Phone Call Authentication
If you are using the phone call authentication method, you need to call the HITS Service Desk for
assistance with changing your UMHS Global Default Override. To do so, complete the following steps:
1. Call the HITS Service Desk at 734-936-8000.
2. Inform them of the following:
- You are a non-UMHS employee who has a sponsored account to sign in to the Michigan Data
Collaborative’s User Portal.
- You are signed up for Duo and using phone-call authentication.
- You are locked out of your Profile page and need help changing your UMHS Global Default Override.
3. The help desk support person will walk you through the rest of the process and help you verify that
your Duo authentication is functional.
Revised: 2017-02-01
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Page 9 of 10
MDC Portal: Installing Duo to Use Two-Factor Authentication
 PROCEDUAL GUIDE
Step 6: Log in
For login steps, see the Accessing the SIM PCMH Project Site guide on the SIM PCMH Support page of the
MDC Website.
NOTE: If you bookmarked the website prior to the launch of the new website (1/13/2017), you may need to
clear your cache and updated your bookmark with this link.
Getting Help
If you need any assistance with setting up or using Duo two-factor authentication, contact the Health
Information Technology and Services (HITS) Service Desk.
Phone: 734-936-8000
Email: MCITServiceDesk@med.umich.edu.
Additional Information: https://wiki.umms.med.umich.edu/display/UMHSHELPDESK/Duo+TwoFactor+Security#DuoTwo-FactorSecurity-HowdoIenroll%3F.
NOTES:
When you call the HITS Service Desk, please give them the following information, as applicable:
 If possible, access your UM ID, UM username, and your Level-1 and Level-2 passwords
 Inform the help desk employee that you are a user of the Michigan Data Collaborative’s User Portal. You
are not a UM employee; however, you have a UM ID and passwords in order to access the Dashboard.
 You are trying to set up Duo to access your Dashboard account.
Revision History
Version
1.0
1.1
1.2
Date of Release
1/30/2017
1/30/2017
2/1/2017
Revised: 2017-02-01
Summary of Changes
New document
Updated link
Added info about website link
SIM_PCMH_Installing_Duo_to_Use_Two_Factor_Authentication.docx
Owner
Kendra Mallon
Kendra Mallon
Kendra Mallon
Page 10 of 10
Open as PDF
Similar pages