Jump to main content

Initial registration in Cisco Duo

Before you can use Cisco Duo and thus multi-factor authentication, you must first register a second factor.

Prerequisites

In order to carry out the following steps, you must be on the UoC campus with any computer (active WLAN or LAN connection to the UKLAN) in order to register once in Cisco Duo.

If you are currently unable to complete the initial registration in person, you can find other options here.

To use the Duo Mobile app as a second factor, you need a mobile device—typically a smartphone or tablet—that meets one of the following requirements:

  • Android 11 or higher
  • iOS 16.0 or higher
  • iPadOS 16.0 or higher
  • watchOS 10.0 or higher

You can find more details on the requirements for Android here and for iOS (iPhone/iPad) here.
Please note that a screen lock (e.g. PIN, password, fingerprint, etc.) must be set up on the mobile device used. Otherwise, authentication attempts will be rejected. Authorization attempts from android devices not passing Google's Play Integrity Check, will be rejected automatically. Mobile devices from Huawei are not supported. Devices with ChromeOS are not supported as well.

If you do not have a mobile device compatible with these requirements, please contact the ITCC Helpdesk.

Be advised, student and staff accounts are personal and that sharing login details or providing access to third parties will result in the account being blocked. If you are unable to come to campus in person to proceed with the instructions on this webpage, please contact the ITCC Helpdesk instead.

If you do not have a mobile device compatible with these requirements or do not wish to use your mobile device, please contact the ITCC Helpdesk.
Further information can be found at Hardware token.

Please note that student and staff accounts are personal and passing on access data or providing access to third parties will result in the account being blocked. If you are unable to come to campus in person, please contact the ITCC Helpdesk.

Procedure

If you are setting up using a single mobile device, please follow these instructions:Initial registration of Cisco Duo with mobile device

Otherwise, please follow the steps below:

You will now need to install the "Duo Mobile" app on your mobile device for the next steps (see requirements). You can find the app in the respective play or app stores.

Android: https: //play.google.com/store/apps/details?id=com.duosecurity.duomobile&hl=de

Apple: https: //apps.apple.com/us/app/duo-mobile/id422663827?mt=8

Upon completing the app's installation, follow the steps below.

Registration in Cisco Duo

Please ensure that you complete the following steps without interruption (e.g. by closing the browser or the respective tab)! Failing to do so might lock you out of your account.

  1. Initial registration for Duo is only possible via devices located on the UoC campus (not from home or on the road via VPN). If this is the case, first go to the website https://mfastart.uni-koeln.de.
  2. Confirm the message that appears with "Okay" [Fig. 1]. You can now change the language in the top-left corner by clicking on "EN" [Fig. 2].
  3. Then log in with your user name and the corresponding password [Fig. 3].
  4. Now click on "First steps" [Fig. 4] and then select the "Duo Mobile" option [Fig. 5].
  5. Regardless of the device used, please select "I have a tablet" [Fig. 6]. Your telephone number is not required and is therefore not stored.
  1. Once you have successfully installed the "Duo Mobile" app, please click on "Next" [Fig. 1].
  2. Use your mobile device to scan the QR code that is displayed on the screen [Fig. 2]. To do this, open the "Duo Mobile" app and select "Use a QR code". Then point the camera of your mobile device at the QR code so that it appears in the square provided on the display of your mobile device.
  3. Then follow the instructions on the screen.
  4. You have now connected your mobile device to your account as a second factor. Click on "Next" [Fig. 3].

Completion of registration on the smartphone

  1. Click on "Next" on your mobile device [Fig. 1], give this account a name and confirm this with "Save" [Fig. 2].
  2. You have now connected your mobile device to your account as a second factor. If you want to practice using Cisco Duo, click on "Practice now", otherwise you can skip this point by clicking on "Skip" [Fig. 3].
  3. We recommend allowing notifications in order to open the "Duo Mobile" app via a message and confirm your identity. Alternatively, you can always use the passcode that is displayed during authentication. If you do not want to allow notifications, you can skip this point [Fig. 4].
  4. You can deactivate the collection of user data [Fig. 5] and confirm the message that appears with "OK" [Fig. 6].
  5. The setup of a device for multi-factor authentication with Cisco Duo has now been successfully completed. Click "OK" to return to the login page [Fig. 7].

Further information