Multi-factor authentication (MFA) is a second layer of security that you have to clear after entering your user ID and password into a system. Duo is the vendor application KU uses to provide multi-factor authentication.

MFA is used when you access systems protected by Single Sign On — systems such as Canvas, Enroll and Pay and HR/Pay. You will use MFA when you sign into these and other KU systems.

When logging into a protect KU system, you will enter your KU Online ID and password as usual. A screen will then appear asking you to choose an authentication method using the Duo app on your smartphone. The best option is a push notification to your phone. Your phone will show an alert, you will accept and you’ll be allowed to enter the system. Alternatively, the Duo app will generate a numeric code or send a text message with a numeric code that can be entered during the log in process.

NOTE: Never approve a Duo request unless you are actively logging into a KU system yourself at that moment!

Learn more about multi-factor authentication.

Duo access is blocked in select international locations:

Like many platforms licensed by KU, Duo complies with United States regulations related to embargoed countries and regions. As required by the U.S. Department of Treasury’s Office of Foreign Assets Control, Duo currently prohibits the unauthorized use of its products or services.  KU users attempting to authenticate to a Duo-protected application from a device with an IP address originating in an OFAC-regulated country or region will be blocked from completing their login and receive an error message.

Please contact the Office of Global Operations & Security (GOS) at at gos@ku.edu if traveling to a restricted country.