Authentication with Duo is required when accessing MICA's VPN, but the authentication process is a little different from other Duo-protected systems. Here's what to expect, and how to use the various Duo authentication methods with the VPN.
How is Duo for VPN different?
When you access the VPN using the Anyconnect client, you will not see a Duo prompt like the one displayed when you access myMICA in your web browser. In fact, Anyconnect will not display anything related to Duo after you enter your username and password. Instead, Duo will automatically send a push notification (if you are using the Duo mobile app) or it will automatically call your default device. Once you have approved the Duo authentication request, Anyconnect will complete the VPN connection.
How can I use different Duo authentication methods?
In addition to push notifications and phone calls, Duo for VPN will work with SMS and passcodes, and you can specify the authentication method you want to use.
Duo Push
If you have registered a device with Duo that is capable of receiving a Duo Push, you will automatically receive a push after submitting your username and password. Open the Duo Mobile app, accept the authentication request, and the VPN login will proceed.
You can force Duo to use push authentication by appending a comma and the word "push" to your MICA password. For example:
Username: mstudent
Password: MySecretPassword,push
Phone Call
If you have registered a phone number with Duo but cannot receive a Duo Push, you will automatically receive a phone call instead. Follow the audio prompts to accept the authentication request and the VPN login will proceed.
You can force Duo to use phone authentication by appending a comma and the word "phone" to your MICA password. For example:
Username: mstudent
Password: MySecretPassword,phone
Passcode
If you would like to use passcode authentication, first locate your Duo passcode. It may be a passcode from the Duo Mobile app or a passcode received via SMS. Then append a comma and the passcode to your MICA password. The VPN login will proceed if the passcode is correct and will fail if it is incorrect. For example:
Username: mstudent
Password: MySecretPassword,234789
SMS
If you would like to use SMS authentication, append a comma and the word "sms" to your MICA password. For example:
Username: mstudent
Password: MySecretPassword,sms
When you submit your credentials your login will be rejected, but you will also receive an SMS containing a passcode. Once you have received a passcode, use the passcode authentication method described above to access the VPN.
Common Issues
There are a few common issues that can arise, usually when using Duo for VPN for the first time. If you encounter a problem not described here, please open a ticket at helpdesk.mica.edu and we will be able to assist.
I don't receive a push notification or a phone call when I log in to Anyconnect
Make sure you have registered at least one device with Duo. If you do not have a phone number or mobile device registered, you will not be able to receive the authentication requests. If you have no devices registered, Duo will automatically walk you through the process when you log in at MICA.edu/Login. Register a device, then try to access the VPN again.
I have the Duo Mobile app but I don't receive a push notification
This usually happens when the Duo Mobile app is installed but has not been activated. The app must be activated every time it is installed, even if you uninstall and reinstall it on the same device. If you have performed a factory reset of your device, or you are using a new device, you will need to perform the Duo Mobile app activation again.
This problem may also arise if you have set your default authentication method to "phone call." If you're expecting a push and not receiving it, Duo may be calling you instead.
I have registered a phone number but I don't receive a call
This usually happens when you have registered more than one phone number with Duo, and Duo is calling a number different from the one you expect. It might also happen if you have set your default authentication method to "push." If you're expecting a phone call you aren't receiving, make sure Duo is calling the correct number, and make sure it isn't sending a push instead.