...
- Start the AnyConnect client, type in the address of the multi-factor enabled VPN server you want to connect to, and click Connect.
- On the next screen, choose the tunnel group from the Group dropdown that you need to connect to. Enter your username and both first and second factor authentication in the same window. The first factor is your UCInet password. The second factor is your Duo Passcode (or you can type "push" if you have a Duo software token).
- Once you enter the correct credentials, or approve the push request, you will have successfully authenticated into the VPN.
...
Login failures and Lockouts
Your Duo token/account will be disabled ("locked-out") automatically when you have five (5) consecutive authentication failures in a row. It does not matter how far apart the failures are. However, if you have a successful authentication before you hit five failures, the count resets back to zero. There are other reasons why you may be unable to login -- See the next section about troubleshooting login failures. If you are sure that you have caused your token/account to become disabled, contact the OIT Help Desk at 42222 for assistance.
Troubleshooting login failures
...