Guide: Use Duo when you travel

Tags PK18

Objective

  • To provide information on using Duo two-factor authentication when away from campus
  • To provide information on the various authentication methods you can use when traveling or studying abroad

Scope

Environment

  • 312306: Duo Security Two-factor Authentication
  • Duo Mobile App
    • Android, iPhone, or Windows smartphone
    • Android or iOS tablet
  • Mobile Phone (cell phone other than a smartphone)
  • Desk Phone (landline)
  • YubiKey 4 Series Security Key
    • YubiKey hardware token
    • U2F hardware device
    • U2F authenticator
    • U2F security token

Rationale

  • You can use Duo when traveling or studying abroad
    • Duo will work in airplane mode, in areas without a cellular signal, and in locations with no Wi-Fi signal, because the Duo Mobile app (installed on your smartphone or tablet) can generate Duo Passcodes even when no network connection is available
    • Duo, when used with a U2F hardware device, will work in areas with unreliable Internet access or coverage 
  • Before you travel, MUIT recommends that you decide which Duo device option(s) you will use when away from campus and enroll a secondary device, in case your primary device is unavailable
  • If you plan to travel outside the U.S., be sure to check with your mobile carrier regarding any fees you may incur for phone calls or texts received while abroad
    • If you're concerned about data usage, select an authentication method like Duo Push or Duo Passcodes — both are available via the Duo Mobile app

Resolution 

 

 

 

 

  • Travel scenario: You left your phone at home or the hotel
    • Suggested authentication option: Request a passcode from IT Help
      • Required: After you've enrolled your primary device for use with Duo Security, MUIT recommends that you add a second device to your account. This will give you the ability to log in to your applications if the device you use regularly to authenticate is damaged, lost, or forgotten
      • Not required: Duo Mobile app, Internet connection, phone service
    • Follow these KB instructions to request a bypass code 

 

 

  • Travel scenario: You need access to Miami's VPN while traveling
    • Suggested authentication option: Use Duo Mobile app passcodes
      • Required: Duo Mobile app installed on your smartphone or tablet
      • Required: Internet connection
      • Not required: phone service, YubiKey hardware device
    • Follow these KB instructions to enroll a smartphone for use with Duo
    • Follow these KB instructions to enroll a tablet for use with Duo
    • Additional information regarding alternate options:
      • If you use the Duo Mobile app to receive push notifications for authentication, be aware that there is a short timeout period the first time authenticating with Duo to VPN and it can be difficult to respond to the push notification fast enough. You can use one of the Duo Mobile app's passcodes the first time authenticating without running into the timeout issue.
      • If you use the Call Me option or SMS texted codes, be aware that there is a short timeout period the first time authenticating with Duo to VPN and it can be difficult to respond to a phone call or texted code fast enough. If you receive texted codes you may have to cancel the first attempt, and use the passcode on the next attempt to get logged in. If you can only use the Call Me option, you may need to request a bypass code from IT Help in order to get logged in the first time.
      • If you use a YubiKey hardware device, be aware that you will need to have the YubiKey configured for use with VPN.

 

  • Travel scenario: You will be accessing Miami resources from China
    • Due to regulations that went into effect in March 2019, callback and SMS text authentication methods may not function as expected.
    • Suggested authentication option: Use the Duo Mobile App for Push notifications or passcodes (Note that the new regulations may also prevent Android phone users from receiving Push notifications automatically, but a user should still be able to 'fetch' a Push notification by opening the Duo Mobile App and swiping down after sending the Push in a web browser)
      • Required: Duo Mobile App
      • Not required: phone service
    • Follow these KB instructions to enroll a smartphone for use with Duo
    • Follow these KB instructions to enroll a tablet for use with Duo

 

Notes

 

Was this helpful?
0 reviews

Details

Article ID: 55713
Created
Wed 6/13/18 11:35 AM
Modified
Fri 4/5/19 8:40 PM
Can you resolve this issue yourself?
Can the end-user resolve the issue using the instructions given?
Or does the end-user need to request assistance from Miami UIT, a client office, or a vendor?
Yes! This is self-service with a smile.