MAC VDI Two-Factor Authentication
by Cisco DUO
What is Two-Factor Authentication?
Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
How it works
At your virtual desktop (VDI) login, enter your username and password as usual
Use your phone to verify your identity
Securely logged in
Check out this Short Video to see how it works.
why do i need this?
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.
Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised.
MAC VDI's Two-Factor Authentication will be provided by Cisco DUO. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.
This second factor of authentication is separate and independent from your username and password — Duo never sees your password.
Two-Factor Authentication is also required by updated Marubeni IT Governance rule, and it’s mandatory for us to implement it to our services.
Enrolling Your Phone in Duo
For instruction video, please access HERE
1.You will receive an invitation email like below. Click the link in the email.
2. Select “Start setup” button.
3. Select “Mobile phone” and “Continue”
4. Enter your mobile phone number, then select “Continue”
5. Select type of your mobile phone, then “Continue”.
6. You will be prompted to install the mobile app. Go to App store of your mobile phone and download the Duo Mobile app.
Please keep the Duo startup screen open on your computer as you will be revisiting it afterwards.
a) Install Duo Mobile app
b) Once the app is installed, click “I have Duo Mobile installed” button.
7. Follow on-screen instruction to activate Duo Mobile.
*Below are example screens from iPhone. Click “+” sign at top-right corner and allow camera access to Duo Mobile when prompted. Scan the QR code.
8. After sucessful QR code scan, you should be redirected to below screen. Select “Continue”.
9. Select “Finish Enrollment”.
10. Congratulations! You’ve completed the enrollment.
How to login VDI with Duo two-factor authentication
Please be sure to complete the enrollment first by following the instruction above.
1.Open VMWare Horizon Client and enter your VDI login credentials as you normally do. Click Login.
2.You will be prompted to either enter the Duo Passcode from your mobile device, enter the SMS code, or authenticate from the notification.
On Duo Mobile app
3.After completing the authentication, double-click your desktop icon to load your VDI as usual.
Other authentication method
You can also use hardware token to authenticate with Duo.
hardware token
To authenticate using hardware token, simply press the green button on your hardware token to generate a new passcode, type it into the Passcode field.