Setting up Multi-Factor Authentication with Duo for Faculty and Staff on Your Mobile Device or MFA Hardware Token

You can install the Duo Mobile app on any iOS or Android device. To do so, either click on the links below or go to the App Store or Google Play Store and search for “Duo Mobile”. There shouldn’t be any cost associated with the app, and the logo looks like the one to the right.

Download links:

• iOS: Download Duo Mobile in the App Store
• Android: Download Duo Mobile in the Google Play Store

Once the app is installed on your device (only installed, you don’t need to do anything more at this point), you’re ready to set up and enroll your device following the instructions in the next section.

Starting on your computer (you’ll be using your mobile device later in the process), in a web browser:

1. Go to id.bcit.ca and, if necessary, login using your usual login credentials.
2. Click on Manage MFA Devices.
3. You’ll see a “Welcome to Duo Security” box. Click the Next button several times, reading the information presented.
   
4. When you arrive at the “Select an option” screen, click the Duo Mobile option.
5. Enter your personal device’s Phone number and click the Add phone number button.
   
6.  You’ll be asked to confirm that the number is correct, if it is, click the Yes, it’s correct button. Otherwise, go back and change it as needed.
7. Click Next on the Download Duo Mobile screen (as you’ve already downloaded the app ahead of time).
8. A QR code will appear on your computer screen.
9. On your mobile device, open the Duo Mobile App and tap the Add + button at the top of the screen.
10. On the “Add your account” screen, tap the Use a QR code button and use your phone’s camera to scan the QR code displayed in your web browser.
    • Note: You may be asked to give permission for the app to use your camera.
11. You’ll now be able to name your account. It should default to “BCIT”. Make any changes you’d like to make and tap the Done button.
    • Note: You’ll now be given confirmation that your account is linked and given an opportunity to practice verification. Going through this quick and simple exercise is useful as it also prompts you to allow push notifications on your phone (recommended as this is the simplest way to do your MFA when you login each day) and make decisions about sharing usage data with the developers (you can choose to turn this off if you’d like).
12. On your computer, you will see a confirmation that you have correctly activated the DUO Mobile app. You may be asked if you want to add another way to login. Click Skip for now.

You have now successfully enrolled and set up your device, so you should be able to use your device immediately to confirm your logins.