Duo: Changes to authentication options
Last updated: January 2, 2025
New UC Office of the President Mandate
In UC’s ongoing commitment to safeguarding and protecting your personal data, the UC Office of the President (UCOP) is introducing enhanced security verification for accessing UCPath.
At UCLA Health we are taking the measures to apply the UCPath-mandated changes to all applications protected by DUO. These changes will begin to be applied for UCLA Health Mednet accounts on December 31, 2024.
- Disable the option to use the phone call verification option for Duo multi-factor authentication
- Update our system to only allow time-sensitive codes
Note: If you do not have access to a mobile device and cannot utilize the Duo Mobile app, purchasing and enrolling a YubiKey is the alternative solution.
Learn more about UC Cybersecurity AlignmentLogin with Mednet account required
Impact
Duo is used when accessing all university-related resources:
- Applications supported by UCLA Health IT do not require DUO while on the Mednet network so we do not anticipate any disruptions to day-to-day work activities while at a UCLA Health location.
- Exception: E-prescribing controlled substances always require DUO.
- Campus and UCOP applications, such as UCPath or UC Learning Center (used for required training), always require Duo including while on the Mednet network. Learn how to use Mednet Login to access these applications.
Begin Using Duo Mobile App for verifications
Use a device with a minimum of either iOS 15 or Android version 11 to download the DUO Mobile App
Follow step-by-step instructions (Login with Mednet account required) to get notifications or use a code for verifications using the Duo Mobile App.
FAQ
I have not enrolled into DUO with a mobile device
If you have not previously enrolled a device into DUO for multi-factor authentication, follow the steps to enroll a device for the first time.
Before getting started with the steps below, we recommend you download the Duo mobile app on a mobile device that you will use to help you authenticate into our UCLA systems.
I receive an error when trying to use DUO Push
You may receive an error when using DUO Push with one of the following issues:
- Have not used DUO Push as a verification method on your mobile app recently
- You recently received a new phone
This issue occurs because you need to reactive you DUO mobile application, please activate by
- Reactivate, add, or enroll a new mobile phone to DUO by following step-by-step instructions
If you need further assistance, reactivate your DUO mobile application by contacting Customer Care at 310-267-CARE (2273). We recommend you familiarize yourself with how you can verify your identity and update your Secret Word when calling Customer Care for assistance.
Is there an alternative to DUO Mobile App
If you do not have access to a mobile device or cannot utilize Duo mobile app for multi-factor authentication, a YubiKey is an alternative option. However, please be aware, you are responsible for any purchase, as well as the maintenance and management of any YubiKeys. Customer Care is not able to assist with enrolling a YubiKey as this process is self-service only and will require you to to access the Duo Enrollment Portal while onsite or on the Mednet network via VPN.
How do I log into campus or UCOP apps using Mednet account
Mednet Login Page - Use Mednet page to login
UCLA Login Page - Click Sign in with Mednet username and password
How do I update Duo multi-factor authentication app and iOS device
Minimum requirement for Duo is version 4.49.0
- Check your version by clicking on the ellipses on the top-left corner of the app. The version is listed at the bottom of the menu.
- If not at the minimum, proceed to update by opening the corresponding app store and go to updates
- If there is no update available, and Open is only showing
- Reinstall Duo Mobile
- Follow the instructions in How to update your device
Support
Contact Customer Care at 310-267-CARE (2273) if you need assistance with your password reset or MFA enrollment. Specialists are available 24/7 to provide support. Before calling, please be prepared to provide verification of your identity by providing one of the following:
- Your Secret Word (Login with Mednet account required)
- A selfie picture that contains you and your UCLA ID badge or another government picture ID
- Your UCLA Health-enrolled Duo device (requires that push notifications are enabled)
- Your UCLA Health pager number