Logging into a Public Computer Using 2-Factor Authentication with Duo


Introduction

Two-factor authentication is required to log in to many of the public-use computers at Virginia Tech. To enroll in 2-factor authentication, see Authenticating using Duo 2-Factor Authentication.

These directions apply exclusively to computers in the labs listed below:

Content

Instructions

Logging in Using Your Default Authentication Device

To log in with your default device:

  1. In the Username field, type your Virginia Tech PID.
  2. In the Password field, type your PID passphrase.  
  3. Click the right arrow or use the Return key. Duo sends a request from ED LDAP Proxy, a push, to the device you authorize with 2-factor.
  4. Approve the request on your authorized device.  
  5. OS-X users - you will receive two pushes. Approve both.

Top of page

Logging in Using Other Authentication Methods

Phone

To use the phone option (To have the authentication request call your default phone):

  1. In the Username field, type your PID.
  2. In the Password field, type your PID passphrase followed by “,phone”.  
    
       passphrase,phone
     
  3. Click the right arrow or use the Return key.  
  4. The phone you authorized for 2-factor receives a call from (888)275-2085, and you will hear the following message, “Welcome from Duo. If you were not expecting this call, please hang up. Otherwise press any key to log in”.  
  5. Press any key on the phone to authorize your login attempt.  
  6. OS-X users - you will receive two calls. Approve both.
App or Hardware Token

To use a passcode from either the app or a hardware token:

  1. In the Username field, type your PID.
  2. In the Password field, type your PID passphrase followed by a comma and your passcode. 
    
       passphrase,passcode
     
  3. Click the right arrow or use the Return key.  
Yubikey

To use a yubikey:

  1. Ensure the yubikey is connected to the machine.
  2. In the Username field, type your PID.
  3. In the Password field, type your PID passphrase followed by a comma.
    
       passphrase,
     
  4. While still in the Password field, press the yubikey. A long passcode is added to the password.  
  5. Click the right arrow or use the Return key.  

Top of page

Troubleshooting

Error: “Authentication via LDAP failed. Invalid Credentials”

Fix: You entered your PID or PID password incorrectly. Try again.

 

Error: “ProcessLoginForUser failed, but a specific error message was not provided”  

Fix: Duo authentication times out at 60 seconds. You did not approve the authentication method. Try again, and make sure to approve within 60 seconds.

 

Error: “Access denied. The username you have entered cannot authenticate with Duo Security. Please contact your system administrator.”

Fix: You do not have a Duo account. To set up 2-factor authentication, see Authenticating using Duo 2-Factor Authentication.

Top of page