The following login options are enabled for use at Penn. Only login options a user has previously enrolled will appear in the user’s “Other Options” menu within the Duo Mobile app. To add, rename, or delete devices after moving to Duo Universal Prompt, use the Duo Device Management Portal.
| Login Option | Used For | Notes |
|---|
Duo Push
Send to phone_push (iOS) | | - Pushes a login request via the Duo Mobile app
- User clicks to approve
- Duo documentation on using Duo Push
|
Duo Mobile passcode
Enter a code from the Duo Mobile app | | - Generates six-digit passcode via the Duo Mobile app
- Do not have to be online (no phone or internet service needed)
- Duo documentation on using a Duo Mobile passcode
|
Text message passcode
Send to "phone 1" (***-***-****) | | - Sends text message (SMS) with passcode to registered phone
- Duo documentation on adding or using phone for text message passcode
|
Phone call
Call "phone 1" (***-***-****) | | - Phone call from Duo to registered phone with voice instructions
- Duo documentation on adding or using phone for phone call
|
Phone call
Call "phone 2" (***-***-****) | | - Appears if user registers a second phone
- Phone call from Duo with voice instructions
- Duo documentation on adding or using phone for phone call
|
Security key
Use a hardware security key | | - User purchases own security key (e.g., YubiKey at Amazon, Yubico website)
- Self-registration
- Plugs into USB port on device and has button to click when prompted; some security key models also support Near-Field Communication (NFC)
- Can be used for Penn or non-Penn MFA
- Good backup option when traveling
- Duo documentation on adding or using a security key
|
Hardware token
Enter a code from your hardware token | - Duo fob
- SafeID fob (only previously registered)
| - Penn will provide (Tech Center in Library)
- Support provider registration
- Generates passcode
- Only works with PennKey MFA
- Duo documentation on using a hardware token
|
Touch ID
Use Touch ID on this device | - MacBook Pro
- MacBook Air
- Magic Keyboard with a Touch ID button
| - Supported browsers: Safari or Chrome
- Fingerprint and Touch ID must first be configured on Mac device before using with Duo (see Apple Support site for instructions)
- iCloud Keychain sync must be enabled on all the Apple devices used with Duo (see Apple Support site for instructions)
- Duo documentation on adding or using Touch ID
|
Bypass code
Enter a code from your IT help desk | | - Code provided by PennKey Support Provider
- See Two-Step help page for contacts
- Duo documentation on using a bypass code
|