Enroll via Push Notification

UPDATE, December 3, 2020: UCPath Error Message

When logging into UCPath, employees may see an "oops" error message from UCPath. This error is unrelated to the MFA implementation. To fix it, open a private or incognito window to log in to UCPath, or click the "back" button to log in again. Visit the MFA FAQ web page to learn more. 


Follow these steps to enroll in Duo with your smartphone. It can take up to 24 hours for your Duo enrollment to become active. You can also view, download, and print a PDF of the instructions

Instrucciones para inscribirse en MFA en español con imágenes.

Before you begin:

  • We recommend performing these steps during support hours (Monday-Friday, 8 a.m.-5 p.m.).
  • Make sure your mobile phone is charged.
  • You will need your Apple App Store or Android Play Store password to complete Step 2.
  • If you are registering your mobile phone as a second device, use these instructions.

STEP 1: Begin Duo Enrollment from Your Computer

Note: These steps must be completed on a laptop or desktop computer.

a) Open a web browser to https://duo-mgmt.identity.ucsb.edu/.

b) Log in to SSO.

c) Your browser will show the enrollment screen. Click "Start Setup."

Start Duo Setup

d) You are prompted to select the type of device you are adding. Select “Mobile Phone,” then click “Continue.”

select device type for Duo Mobile

e) Enter your mobile phone number in the space provided.

enter your phone number

f) After entering the phone number, a second field displays for you to confirm the number. Check that the number is correct, select the checkbox, then click “Continue.”

g) Enter the type of mobile phone you are enrolling, then click “Continue.” (NOTE: Smartphone users should select iPhone, Android, or Windows Phone). 

STEP 2: Install the Duo Mobile App on Your Mobile Phone

a) Go to the App Store or Play Store on your mobile phone.

b) Search for Duo Mobile.

c) Install the free app on your mobile phone.

NOTE: You will need your App Store or Play Store password to complete installation. You will also need to allow Duo Mobile to access your camera. 

STEP 3:  Complete Enrollment Using Your Computer and Your Mobile Phone

a) After completing the installation of the app on the mobile phone, on your computer, click “I Have Duo Mobile Installed.”

Duo Mobile app installed selection

b) The activate Duo Mobile screen displays. With the activate Duo Mobile screen displayed on the computer, open the Duo Mobile app on the mobile phone.

Duo mobile screen

c) Click the plus sign (+) in the upper right corner of the phone screen.

plus sign on Duo app

d) From the Duo Mobile app, scan the QR code that displays in the activate Duo Mobile computer screen.

Duo QR code

e) A green check mark displays on the computer screen. Click “Continue.”

green check mark Duo QR code

f) A "Login request" notification from Duo Mobile arrives on your phone. When you open the app, it will display "Approve" and "Deny" buttons. Select "Approve." If you accidentally click "Deny," you can choose the "It was a mistake" option. 

 Duo Mobile app push login

STEP 4: Select Duo Authentication Method on the Computer  

a) The enrollment successful screen will display. Click “Dismiss.”

Duo enrollment successful

b) Verify that your phone number is correct, and select an authentication option for “When I Log In.” 

choose authentication method

c) Click "Save." The recommended setting is "Automatically send this device a Duo Push." You are now enrolled in Duo! 

For the latest reference see: https://guide.duo.com/.

Test the Push Notification

If you're ready to register a second device for MFA with Duo, visit this link.  

Testing the Push Notification

a) Open a web browser to https://duo-mgmt.identity.ucsb.edu/.

b) Log into SSO.

c) Your browser will show the MFA with Duo Self-Registration form.

d) Click the “Send me a push” button on the Self-Registration form.

e) You will receive an alert on your phone that says "Login request: Duo Self Service Portal."

f) Open the notification and press "Approve." 

g) You will see the My Settings & Devices screen. This means your push notification works as configured. You may exit the application and the single sign-on web browser.