Do the following steps to enroll a new user in Duo.
- Make sure the user has either "secDUOEnforceMFA" in the "Member Of" the user being enrolled.
- Have user log into computer.
- Sync Azure AD.
- Sync Duo Users.
- Download "Duo Mobile" from the App store on either their work issued phone or personal phone. (Only if the person is fine with downloading it on their personal device.)
- Once the app is installed, go to their email, look for an email from "Duo Security."
- Click the top Link.
- In the app, Click "Duo Mobile."
- Click “Add Account" and Scan the QR Code.
- The “Account Name” can stay default, “Allow all Notifications” and send by “Duo Push”.
- Click “continue” on the computer and “Skip the Practice.”
- Lock the Computer.
- Have the user sign in.
- They will now be prompted to sign in via duo push notification.
- Click & Check box “Remember me for 12 Hours.”
- Activate Duo Offline Code.
- Click “Add Account” in the top right of the App.
- Scan the QR Code and Leave the default name.
- Click “Activate Offline Code”
- In the app, Click “Show” next to the offline code and type the 6-digit code.
If Duo does not prompt at login, please use this article: How To: Duo for Windows Logon not working
The user is now enrolled into Duo Authentication! Please Update this article if anything changes as this will be used for new user setup.