2FA: Use the Duo Mobile Push Method of Two-Factor Authentication

Article Intended For

Penn State faculty, staff, students, and other affiliates currently enrolled in two-factor authentication (2FA).

Introduction

What is a Push Notification? 

• A push notification is simply a message that appears in a banner or pop-up on your phone screen.
• Push notifications are the simplest and most secure method of using two-factor authentication.
• This method is available to anyone who has enrolled a smartphone for use with 2FA and installed and activated the Duo Mobile app. If you have, Send Me a Push is one of the options you'll see on the 2FA Login, Devices and Settings Screen when you log in to WebAccess.

How does it work?

When you choose Send Me a Push, the Duo 2FA process initiates ("pushes") a message to your phone to notify you that someone is requesting approval to log in to WebAccess with your ID.  Once you approve the request, you confirm that you are the one attempting to log in, and are immediately logged in to the resource you're attempting to access. 

How do I use it?

Follow the steps below to use a push notification for two-factor authentication.

Step-by-Step Instructions

1. Go to WebAccess.psu.edu or to the website you wish to log in to.
   
   
2. On the WebAccess login screen, enter your user ID and password, and click Login.
   
   
3. If it's not already selected, select the smartphone or tablet you wish to use from the Device drop-down.
   
   NOTE: Make sure the screen on that device is unlocked (unless you wish to authenticate using your Apple Watch, in which case your phone must be locked).
   
   
   
   
4. Click Send Me a Push.
   
   
   
   A request to approve login is sent to the device you're using to authenticate (your smartphone, tablet, or Apple Watch).  
   
   The notification shows the name of the resource requesting authentication (in this case, WebAccess) and offers the option to Approve or Deny the request.
   
   NOTE:  If Send Me a Push is not displayed as an option, you may need to re-activate Duo Mobile.  For additional information, see knowledge base article Activate or Re-Activate Duo Mobile on My Smartphone to Receive Duo Push and Duo Passcodes.
   
   
5. Follow the onscreen instructions on your phone or tablet to approve the request.
   
   
   
   The website you're logging in to appears as soon as you approve the authentication request.

Where to Find Help if Duo Push Isn't Working: 

• No Duo Push Option on the 2FA Login Screen
• 2FA: I'm no longer receiving Duo Push Notifiations on My Enrolled Smartphone