Main Content Region

DUO Multi-Factor Authentication (MFA) Requirements for All Employees

Duo Multi-Factor Authentication (MFA) Requirement

In order to comply with CSU security requirements as a result of the Chancellor’s Office Information Security Audit of 2012, the CSU elected to implement Duo Security for Multi-Factor Authentication (MFA) purposes. CSUSB IT Governance Executive Committee has approved the adoption of Multi-Factor Authentication for all employees by December 2020. 

Duo will be required by December 2020!

Staff: December 1, 2020
Faculty: December 18, 2020

Duo Roll-out Roadmap

About Duo

Duo is a two-step authentication solution that will require the end-user to verify the validity of their authentication credentials by providing additional information from a physical device in their possession, preventing anyone who only has the Coyote ID and password from gaining access to resources. The physical device could be a mobile phone, tablet, hardware token, or a landline.
Please feel free to watch this short introductory video on Duo Security:

Get Started with Self Enrollment

The following video shows the few simple steps to get started on enrolling into Duo on your own. You may also follow the simple steps in this knowledgebase article.

While Duo supports multiple types of devices, it is highly recommend that you use the Duo Mobile app on a smartphone to enroll. The follow table is an overview of the different device types that Duo supports.

Duo Support
Device Type Push Notification Voice Call SMS One-time Code Pros Cons Recommendation
Smartphone (with Duo Mobile app) Yes (Will require network) Yes (Will require network) Yes (Will require network) Yes (Will NOT require network)

Most versatile option 

Works without cell/Wi-Fi connection 

Duo app is free 

Easy to use 

More likely to be with you

Some people don't own a smart phone 

Some people don't want to use a personal phone

Recommended primary device

Flip “non-smart” mobile phone


Smartphone without Duo Mobile app 

No Yes (Will require network) Yes (Will require network) No

More likely to be with you

Cellular signal required

Good primary device (if you don't have a smartphone)

Tablet (with Duo Mobile app) Yes (Will require network) No No Yes (Will NOT require network)

More likely to be with you

Some people don't own a tablet

Good primary device (if you don't have a phone) 

Excellent secondary device

Single-button hardware token/fob (SBHT)

No No No Yes (Will NOT require network)

Easy to use


No battery required

Must be physically with you 

Can become out of sync 

Non-replaceable battery

Fair primary device 

Good secondary device

Landline No Yes No No

May work without cell/Wi-Fi connection

Must be at location of landline

Fair secondary device

For those who do not want to use the Duo Mobile app on a phone or tablet, CSUSB can provide a single-button hardware token. There are no initial fees, but there is a $20 replacement fee for lost, stolen, or damaged devices (similar to losing a campus key). To request a token, please submit a service request to the Technology Support Center and we will assign you one. You will be required to sign a 'Cryptographic Device Agreement' form.

We look forward to working with you in securing your account. Please feel free to contact the Technology Support Center at (909) 537-7677 or if you have any questions.