Duo 2 Factor Authentication

VPN Access with Duo

Authentication with Duo is required when accessing MICA's VPN, but the authentication process is a little different from other Duo-protected systems. Here's what to expect, and how to use the various Duo authentication methods with the VPN.

How is Duo for VPN different?

When you access the VPN using the Anyconnect client, you will not see a Duo prompt like the one displayed when you access myMICA in your web browser. In fact, Anyconnect will not display anything related to Duo after you enter your username and password. Instead, Duo will automatically send a push notification (if you are using the Duo mobile app) or it will automatically call your default device. Once you have approved the Duo authentication request, Anyconnect will complete the VPN connection.

How can I use different Duo authentication methods?

In addition to push notifications and phone calls, Duo for VPN will work with SMS and passcodes, and you can specify the authentication method you want to use.

Duo Push

If you have registered a device with Duo that is capable of receiving a Duo Push, you will automatically receive a push after submitting your username and password. Open the Duo mobile app, accept the authentication request, and the VPN login will proceed.

You can force Duo to use push authentication by appending a comma and the word "push" to your MICA password. For example:

Username: mstudent
Password: MySecretPassword,push

Phone Call

If you have registered a phone number with Duo but cannot receive a Duo Push, you will automatically receive a phone call instead. Follow the audio prompts to accept the authentication request and the VPN login will proceed.

You can force Duo to use phone authentication by appending a comma and the word "phone" to your MICA password. For example:

Username: mstudent
Password: MySecretPassword,phone

Passcode

If you would like to use passcode authentication, first locate your Duo passcode. It may be a passcode from the Duo mobile app or a passcode received via SMS. Then append a comma and the passcode to your MICA password. The VPN login will proceed if the passcode is correct and will fail if it is incorrect. For example:

Username: mstudent
Password: MySecretPassword,234789

SMS

If you would like to use SMS authentication, append a comma and the word "sms" to your MICA password. For example:

Username: mstudent
Password: MySecretPassword,sms

When you submit your credentials your login will be rejected, but you will also receive an SMS containing passcode(s). Once you have received a passcode, use the passcode authentication method described above to access the VPN.

Common Issues

There are a few common issues that can arise, usually when using Duo for VPN for the first time. If you encounter a problem not described here, please open a ticket at helpdesk.mica.edu and we will be able to assist.

I don't receive a push notification or a phone call when I log in to Anyconnect

Make sure you have registered at least one device with Duo. If you do not have a phone number or mobile device registered, you will not be able to receive the authentication requests. If you have no devices registered, Duo will automatically walk you through the process when you log in at www.mica.edu/mymica. Register a device, then try to access the VPN again.

I have the Duo mobile app but I don't receive a push notification

This usually happens when the Duo mobile app is installed but has not been activated. The app must be activated every time it is installed, even if you uninstall and reinstall it on the same device. If you have performed a factory reset of your device, or you have gotten a new device, you will need to perform the Duo app activation again.

This problem may also arise if you have set your default authentication method to "phone call." If you're expecting a push and not receiving it, Duo may be calling you instead.

Visit duo.mica.edu to perform the app activation and check your default settings.

I have registered a phone number but I don't receive a call

This usually happens when you have registered more than one phone number with Duo, and Duo is calling a number different from the one you expect. It might also happen if you have set your default authentication method to "push." If you're expecting a phone call you aren't receiving, make sure Duo is calling the correct number, and make sure it isn't sending a push instead.

Visit duo.mica.edu to check your phone numbers and your default settings.