Page Comparison

...

1. When you get redirected to WebAuth from a web application that is enforcing multi-factor authentication, you will first see a WebAuth login page. Login with your UCInetID and Password.
   
   
   
2. After successful login using first factor, you will be presented with the second factor login. You will have an option to choose your type of phone device and either Duo Push or to enter in a Passcode. The example that is shown uses "Android" as a device.  If you choose to select Duo Push, then press the "Log in" button.  Otherwise you can select "Passcode" and enter the passcode that is currently being displayed on your hardware token or mobile app, then press the "Log in" button.
   
3. Once you enter the correct passcode, or approve the push request, the WebAuth page will redirect you back to the application you came from successfully authenticated.

Windows

Note: This is a preview of what it may look like, contact your system administrator about the current status of your systems.

1. Remote Desktop or get Console access to the Windows system you want to log into.  You will first be presented with the familiar Windows login dialog box.  Here enter your Windows username and password (domain or local account, depending).  
   
2. After successful login using first factor, you will be presented with the second factor login. You can enter the passcode that is currently being displayed on your hardware token or mobile app, or if you have Duo Push enabled you can type "push" and the request will be sent to your mobile device to approve. 
    
3. Once you enter the correct passcode, or approve the push request, you will have successfully authenticated into the Windows system.

Unix SSH

Note: This is a preview of what it may look like, contact your system administrator about the current status of your systems.

1. Open up an SSH terminal session to the Unix system you want to log into.  You will first be presented with the familiar Unix login prompt.  Here enter your Unix username and password (how first factor Unix authentication is setup various between environments, ask your system administrator for specifics). 
    
2. After successful login using first factor, you will be presented with the second factor login. You can enter the passcode that is currently being displayed on your hardware token or mobile app, or if you have Duo Push enabled you can type "1" and the request will be sent to your mobile device to approve.
    
3. Once you enter the correct passcode, or approve the push request, you will have successfully authenticated into the Unix system.

SecretServer

Note: This is a preview of what it will look like, it is not yet live until all users get their tokens.

1. Go to the SecretServer login page.  Rather than RSA login screen, you will first be presented with the regular SecretServer login page.  Here enter your SecretServer username and password.  
   
2. After successful login using first factor, you will be presented with the second factor login, in this case using Duo Radius proxy. In this case the radius server is authenticating based on UCInet password and Duo.  So here enter a combination of <ucinet password>,<duo passcode or "push">.  For example, if my UCInet password was "abcde" and passcode currently "123456", then I would enter "abcde,123456" or if I had Duo Push enabled "abcde,push".  Note: the timeout for push in this environment is very short. 
   
3. Once you enter the correct credentials, or approve the push request, you will have successfully authenticated into SecretServer.

VPN

Note: This is a preview of what it will look like, it is not yet live until all users get their tokens.

1. Start the AnyConnect client, type in the address of the VPN server you want to connect to, and click Connect. 
   
2. On the next screen, choose the tunnel group from the Group dropdown that you need to connect to.  Enter your username and both first and second factor authentication in the same window.  The first factor is your UCInet password.  The second factor is your Duo Passcode or you can type "push" if you have Duo Push enabled. 
   
3. Once you enter the correct credentials, or approve the push request, you will have successfully authenticated into the VPN.

...