Two-Step Verification: Login Options

The following login options are enabled for use at Penn. Only login options a user has previously enrolled will appear in the user’s “Other Options” menu within the Duo Mobile app. To add, rename, or delete devices after moving to Duo Universal Prompt, use the Duo Device Management Portal.

Login Option	Used For	Notes
Duo Push Send to phone_push (iOS)	Smartphone Tablet	Pushes a login request via the Duo Mobile app User clicks to approve Duo documentation on using Duo Push
Duo Mobile passcode Enter a code from the Duo Mobile app	Smartphone Tablet	Generates six-digit passcode via the Duo Mobile app Do not have to be online (no phone or internet service needed) Duo documentation on using a Duo Mobile passcode
Text message passcode Send to "phone 1" (***-***-****)	Non-smartphone Smartphone	Sends text message (SMS) with passcode to registered phone Duo documentation on adding or using phone for text message passcode
Phone call Call "phone 1" (***-***-****)	Non-smartphone Smartphone	Phone call from Duo to registered phone with voice instructions Duo documentation on adding or using phone for phone call
Phone call Call "phone 2" (***-***-****)	Non-smartphone Smartphone	Appears if user registers a second phone Phone call from Duo with voice instructions Duo documentation on adding or using phone for phone call
Security key Use a hardware security key	YubiKey     Feitian	User purchases own security key (e.g., YubiKey at Amazon, Yubico website) Self-registration Plugs into USB port on device and has button to click when prompted; some security key models also support Near-Field Communication (NFC) Can be used for Penn or non-Penn MFA Good backup option when traveling Duo documentation on adding or using a security key
Hardware token Enter a code from your hardware token	Duo fob SafeID fob (only previously registered)	Penn will provide (Tech Center in Library) Support provider registration Generates passcode Only works with PennKey MFA Duo documentation on using a hardware token
Touch ID Use Touch ID on this device	MacBook Pro MacBook Air Magic Keyboard with a Touch ID button	Supported browsers: Safari or Chrome Fingerprint and Touch ID must first be configured on Mac device before using with Duo (see Apple Support site for instructions) iCloud Keychain sync must be enabled on all the Apple devices used with Duo (see Apple Support site for instructions) Duo documentation on adding or using Touch ID
Bypass code Enter a code from your IT help desk	PennKey Support Provider	Code provided by PennKey Support Provider See Two-Step help page for contacts Duo documentation on using a bypass code