The following document provides instructions on how to self-enroll to the Duo Multi-Factor Authentication environment.

Duo provides an Enrollment Guide that you may want to look at before you continue.

Automatic Enrollment

When you sign into myaccount for the first time to set up your Pacific University account, it should prompt you to sign up for Duo. Simply follow these steps to set up multifactor authentication for your Pacific Account.

1. Download the free Duo Mobile App onto you device from the Android or Apple app stores.
2. Open up the app and click "Create an account."
3. Scan the QR that will appear on your screen during the Pacific University account creation process.
4. Name your Duo Account. The default "Pacific University" is the name most people choose. This name is inconsequential.
5. Follow the on-screen steps to test your new multifactor authenticator.

If during the account creation process you have any questions about Duo MFA please contact us at 503-352-1500

Manual Enrollment 

If your Duo account wasn't set up as part of your initial account creation you can follow these steps instead.

1. If you plan to use a smartphone or tablet, first download the free Duo Mobile app onto your device from the Android or Apple app stores.
2. On your computer, go to account.pacificu.edu. 
3. Click "Sign in" in the upper right. 
4. Sign in with your PUNETID and password.
5. Contact the Technology Help Desk at 503-352-1500 for a "Duo Bypass Code."
6. Enter the provided Bypass Code when prompted.
7. Click "Duo MFA" on the left side of the myaccount page.
8. Click "Add or Manage Devices."
9. Sign in again with your PUNETID and password
10. Enter the 2nd "Duo Bypass Code" provided by the Technology Help Desk.
11. Click "Add a Device"
12. Choose a device to add. 
    1. Both Duo and Pacific recommend a Mobile (smart) phone. Follow all the prompts to ensure you are enrolled. When you get back to the "My Settings & Devices" screen, you are fully enrolled.
13. It may take the university system ~5 minutes to synchronize with Duo and recognize that you are fully enrolled.

Authenticating

The next time you authenticate to the university Single Sign-On environment, you should be prompted for your Duo authentication after you have successfully authenticated with your PUNet ID and PUNet password. Welcome to multifactor authentication!

You can also use your Duo Mobile app to generate a passcode (also called a TOTP).  Just tap on the Pacific University entry in the app to generate a passcode.  This is a great way to authenticate if you don't receive a Duo Push Notification you are expecting.

Adding Additional Devices

University Information Services recommends you register at least two different devices to Duo, and we recommend a security key as a backup authenticator. By having a backup authenticator, it will allow you to get into your account should you forget -- or lose -- your primary device. You can add additional devices right from myAccount:

1. On your computer, go to account.pacificu.edu. 
2. Click "Sign in" in the upper right. 
3. Sign in with your PUNETID and password
4. When prompted, authenticate with Duo Mobile or your Yubikey
5. Click "Duo MFA" on the left side of the myaccount page.
6. Click "Add or Manage Devices."
7. Sign in again with your PUNETID and password
8. When prompted, authenticate again with Duo Mobile or your Yubikey
9. Click "Add a Device"
10. Choose a device to add.
11. Your new devices will be available as soon as you enroll them.

For more information, please see the Duo service catalog entry.