Summary
If TouchID is your only device with Duo MFA, you'll only be able to log in with the MacBook that has TouchID. This article shows how to set up another factor (such as your cell phone) in Duo if you already (and only) have TouchID enabled.
Body
For some users (who use a MacBook), TouchID seems like the obvious way to set up your verification method for Duo authentication. However, TouchID is tied directly to the MacBook as a device, which means that TouchID can only verify from the MacBook. This means that users who are only using TouchID cannot log in with phones, tablets, other laptops, etc. This article will cover setting up your cell phone as a second factor for authentication when you already have TouchID enabled.
Note: these steps must be performed from your MacBook, as a Duo verification is part of this process.
-
Log into your Okta account at nmhschool.okta.com. After you enter your username and password, you’ll see the Duo prompt to verify your login. Do not perform the verification step.
-
From the Duo verification screen, click on Settings in the top right.
-
This will bring up a menu on the right side of the Duo screen. You’ll want to click Add a new device.
-
From here, you’ll be prompted to verify with Duo via TouchID (which is the usual process you go through when logging into Okta on your MacBook). Once you verify, you’ll be able to add a new device (usually your cell phone) by following the instructions from Step 2 in this article.
Troubleshooting
A common issue when using push notifications on your cell phone is that you will get the error NSURLErrorDomain-999. If you receive this error when trying to accept a push notification login request, please register your device on the NMH network.