If you checked the Save my email address and login options box earlier and also use a passkey or Duo Push as your authentication method, we will save that method as a preference as well and prompt you automatically to use the same verification method the next time you log in. If you want to choose a different way to confirm your identity after your initial choice, click Back to login options to return to the list of all second-factor options and choose again. If, for example, your organization disabled the 'Phone Callback' method, you won't see the 'Phone call' 2FA option when you log in. The two-factor authentication methods available may differ depending on your organization's Admin Authentication Methods settings.

Yubikey passcode: Authenticate with a passcode generated by a Yubikey.

Hardware Token: Enter a passcode generated by a physical device issued by your organization.

Duo Mobile passcode: Authenticate with a passcode generated in the Duo Mobile app.

Phone Call: Receive a phone call communicating a one-time passcode and enter the passcode in the space provided.

Text Message: Receive an SMS message containing a one-time passcode and enter the passcode in the space provided.

This method only appears if you have added a passkey to your admin profile. For integrated devices like Touch ID, follow the prompts from your browser that appear to confirm your identity. For supported external security key devices, insert it and then touch it.

Passkey: Use a passkey including security keys and biometrics.

See Use Duo Push for Administrator Authentication for instructions. You must activate your administrator account for Duo Mobile separately from your user account to use Duo's push authentication at the Admin Panel.

Duo Push: Approve a login verification request sent to your smartphone with the Duo Mobile app.

Complete login verification by selecting one of the available methods. If you checked the Save my email address and login options box when you entered your Duo administrator username, then we'll also save your SSO login preference and won't ask you to choose between single sign-on or password authentication again.Īfter successful authentication via SSO or by entering the correct Duo admin password, you then must authenticate using a second factor. Enter your administrator password, and click Log in. Click Log in using password to show the password entry form. If you created a password for the Duo Admin Panel you may use that instead of SSO. Clicking the Log in using Single Sign On button takes you to your organization's IdP to complete primary authentication. Click the Continue to identity provider button to be taken to your organization's identity provider (IdP) where you'll sign in with your primary user credentials. Your organization prefers that administrators sign in using SSO.

Your organization has not configured SAML login for admins, so no SSO options are presented. The next step depends on whether your organization has federated Duo administrator logins with an external single sign-on identity provider (IdP), and whether SSO login is required or optional. Don't do this if you are on a shared kiosk or public computer. If you're logging in from a private computer or device, you can check the Save my email address and login options box.

Please use one of Duo's supported browsers.Įnter your administrator account email address. Microsoft ended Internet Explorer desktop application support on June 15, 2022. ĭuo no longer supports use of Internet Explorer to access the Admin Panel. or check your browser’s SSL implementation here. If you have issues accessing the site, please update your browser to a recent version of Chrome, Firefox, Edge, Safari, etc. The browser used to access the Admin Panel must support TLS 1.2, which most modern browsers do by default.

Duo mfa api