Setting up Duo Mobile MFA

Multi-Factor Authentication (MFA) adds a second layer of security to your 91ΑΤΖζOne account by verifying your identity using a second factor provided through the free Duo Mobile app. Duo can prevent someone from logging into your account, even if they know your password. To activate Duo MFA for your 91ΑΤΖζOne account you will need to scan a QR code on a screen using your phone. You will need two devices to complete this process.

  1. Install the Duo Mobile app on your phone or tablet
    • (Check )
    • (Check )
  2. Set up your 91ΑΤΖζ account, using your computer or a second mobile device. The first time you log in to one.91ΑΤΖζ, a series of prompts will guide you through the self-service Duo Mobile MFA enrollment process.
  3. Set up Duo Restore to make it easy to move to a new mobile phone in the future

You will need to install Duo Mobile on one device, and sign in to  on another device.

Set up Duo Mobile on your Smartphone

The following procedure is for setting up the Duo Mobile multi-factor authentication app on a mobile device. For security, Duo MFA is required for accessing your 91ΑΤΖζ digital content. If you do not have a smartphone or tablet, or you do not want to install Duo on your device, contact the IT Service Desk (408-924-1530) to request a hardware token (key fob).

  1. On your mobile device, download and install the Duo Mobile application from the App Store or Google Play.
    Duo Mobile icon in the Google or Apple App Store.
  2. On your mobile device, open your internet browser and go to .
  3. Tap the menu in the upper right.
    One.sjsu.edu Mobile Menu Button with words "Tap This"
  4. Click Sign In.
  5. Enter your 91ΑΤΖζ ID and password, then tap Sign In.
  6. When prompted to β€œProtect Your San JosΓ© State University Account,” tap Start Setup.
  7. Select the type of device you’re adding, Mobile Phone or Tablet, then tap Continue.
  8. Complete one of the following:
    • If you selected Mobile Phone for your device:
      • Enter and confirm your phone number (including area code), then tap Continue.
      • Select the type of device (iOS or Android) and tap Continue.
    • If you selected Tablet for your device:
      • Tap Continue.
  9. Within one.91ΑΤΖζ, tap I have Duo Mobile.
  10. Tap Take me to Duo Mobile.
    Prompt from DUO Mobile to complete set up.
  11. Within the Duo app, tap Save.
    By default, the account name is set to β€œSan Jose State University.”
    DUO Mobile Prompt to name the account being set up.
  12. Go back to your internet browser and tap Continue from the Duo screen.
  13. If the settings and devices are correct, tap Continue to Login.
  14. Choose one of the following:
    • Select Send Me a Push to send a quick approve-or-deny prompt to your device.
    • Select Enter a Passcode to use the six-digit passcode displayed in the Duo app.
  15. Complete login.
  16. When prompted by OKTA, complete the following:
    • Choose a security question from the drop-down menu, or create your own question, then provide an answer (Required).
    • Add a secondary email (Optional).
      NOTE: If assigning a secondary email, the secondary email should match the email you used when you applied to 91ΑΤΖζ. If you need to update your secondary email, you must first complete all OKTA steps. For instructions on changing your secondary email, see Set My Preferred Email Address.
  17. Tap Create Account.

Setup recovery with Duo Restore

This procedure is optional but recommended to ensure that you maintain access to your 91ΑΤΖζ account if you get a new device or need to reset your device to factory settings.

  • If you have an iPhone or iPad, . Please ensure your phone is backing up to iCloud so you can restore to a new phone without losing your Duo Mobile.
  • Android phones and tablets need to . When choosing a Google Account to back up to, choose the personal Google Account you used to activate your phone when you purchased it. When installing on a new phone set up with the same personal Google Account, you can choose to restore your Duo settings from that account.

Enable/Disable Auto-Push for MFA

You can streamline your multi-factor authentication process when logging in by enabling auto-push to automatically prompt you to authenticate using your method of choice via the Duo Mobile app.

This procedure is optional.

To enable auto-push:

  1. Visit the page.
  2. Enter your 91ΑΤΖζ ID and password and click Login.
  3. Before authenticating with MFA, select Settings > My Settings & Devices.
    Duo Mobile Screen with options to select My Settings & Devices.
  4. Complete multi-factor authentication as normal.
  5. Under Default Device, select your default device from the drop-down list.
  6. Under When I log in, select Automatically send this device a Duo Push.
    Duo Mobile Push Selection
  7. Click Save.

NOTE: To turn off auto-push for MFA, select Ask me to choose an authentication method.


 

Support

Login support is provided by the IT Service Desk. You may:
  • Call the Service Desk during our business hours at (408) 924-1530
  • Visit the Service Desk on the first floor of Clark Hall (room 102)
Because login and MFA are security services, the IT Service Desk must confirm your identity before providing assistance.