Setting up Multi-Factor Authentication with Duo for Faculty and Staff on Your Mobile Device or MFA Hardware Token

All BCIT faculty, staff, and contractors will transition from Duo to Microsoft MFA starting July 2025. If you’re currently using Duo MFA, we recommend transitioning to Microsoft MFA as early as possible to avoid any disruption to your access. While the opt-in period runs until September 15, 2025, completing the transition ahead of busy periods—such as vacation time or the start of the Fall term—will help ensure a smooth and stress-free experience.

For details and setup instructions, please refer to this article: About Employee Multi-Factor Authentication

Please note that Employees with System Administrator (SA) accounts used for remote server access will continue to use Duo for those accounts. Microsoft MFA will apply to their primary BCIT account, while Duo MFA remains in place exclusively for SA account authentication until further notice.

Now that multi-factor authentication has been implemented for all faculty, staff, and contractors, it is a required part of logging in to the most frequently used BCIT apps and services. Before you can use multi-factor authentication, you’ll either need to enrol a mobile device (either your BCIT device if you have one or your own personal device) or request a hardware token (fob key).

If you’re using a mobile device, you’ll need to first install the Duo Mobile app on your device. Once it’s installed, you’ll be able to enroll your device.

Setting up your mobile device for MFA

You can install the Duo Mobile app on any iOS or Android device. To do so, either click on the links below or go to the App Store or Google Play Store and search for “Duo Mobile”. There shouldn’t be any cost associated with the app, and the logo looks like the one to the right.

Download links:

iOS: Download Duo Mobile in the App Store
Android: Download Duo Mobile in the Google Play Store

Once the app is installed on your device (only installed, you don’t need to do anything more at this point), you’re ready to set up and enroll your device following the instructions in the next section.

Starting on your computer (you’ll be using your mobile device later in the process), in a web browser:

Go to id.bcit.ca and, if necessary, login using your usual login credentials.
Click on Manage MFA Devices.
You’ll see a “Welcome to Duo Security” box. Click the Next button several times, reading the information presented.
When you arrive at the “Select an option” screen, click the Duo Mobile option.
Enter your personal device’s Phone number and click the Add phone number button.
You’ll be asked to confirm that the number is correct, if it is, click the Yes, it’s correct button. Otherwise, go back and change it as needed.
Click Next on the Download Duo Mobile screen (as you’ve already downloaded the app ahead of time).
A QR code will appear on your computer screen.
On your mobile device, open the Duo Mobile App and tap the Add + button at the top of the screen.
On the “Add your account” screen, tap the Use a QR code button and use your phone’s camera to scan the QR code displayed in your web browser.
- Note: You may be asked to give permission for the app to use your camera.
You’ll now be able to name your account. It should default to “BCIT”. Make any changes you’d like to make and tap the Done button.
- Note: You’ll now be given confirmation that your account is linked and given an opportunity to practice verification. Going through this quick and simple exercise is useful as it also prompts you to allow push notifications on your phone (recommended as this is the simplest way to do your MFA when you login each day) and make decisions about sharing usage data with the developers (you can choose to turn this off if you’d like).
On your computer, you will see a confirmation that you have correctly activated the DUO Mobile app. You may be asked if you want to add another way to login. Click Skip for now.

setup complete screen with a green checkmark

You have now successfully enrolled and set up your device, so you should be able to use your device immediately to confirm your logins.

Requesting a hardware token (fob key)

If, for whatever reason, you’d prefer not to use your personal device and don’t have a BCIT-issued mobile device to use, you can request a hardware token. Simply fill in this request form.

Once the hardware token has arrived and been keyed to your account, you’ll be informed by email when and where to pick it up. For those on campuses other than the main Burnaby campus, your hardware token will be available for pickup at your regular campus (you won’t have to go to Burnaby to pick it up). You’ll be able to start using your hardware token right away to confirm your logins.

Setting up Multi-Factor Authentication with Duo for Faculty and Staff on Your Mobile Device or MFA Hardware Token

Changes to Employee MFA at BCIT

Note: Employees with System Administrator (SA) accounts

Setting up your mobile device for MFA

Installing the Duo application on your mobile device

Enrolling your device

Requesting a hardware token (fob key)

More information about multi factor authentication at BCIT