KAUST IT · Account Security
Duo protects your KAUST account with a second step at login. After your password, you approve the sign-in on your phone, so a stolen password is not enough to get in. Set it up once and you are covered everywhere you sign in.
Duo is KAUST's two-factor authentication, or 2FA. You may also hear it called multi-factor authentication, or MFA. To prove it is really you, you give two things: something you know, your password, and something you have, your phone. So a stolen password alone is not enough to get in.
Duo works both ways. Duo Mobile can create a 6-digit passcode with no internet at all, so you can log in when your phone is offline. Push notifications are different. They need an active connection, WiFi or 4G/5G. No connection means no push, so use a passcode instead.
A step-by-step walkthrough. Use Back and Next to move through it, or tap a stage to jump.
Duo protects your KAUST account. Pick the option that fits you.
Your KAUST account is still linked to your old phone. IT has to clear that link before you can set up a new one. You can ask through VITA, and you do not need to see anyone in person.
VITA offers two ways. The right one depends on where you are.
| Where you are | Choose |
|---|---|
| On campus | KAUST Username and Password |
| Off campus | Passcode to your Recovery Email |
That option sends a Duo request to your phone. Approving a Duo request is the one thing you cannot do right now, so you would be stuck in a loop. The recovery email option skips Duo. It sends a one-time code to the personal email address you gave KAUST IT.
Then neither option can confirm you are you. Call the IT Service Desk and we will open the ticket for you.
Not sure which to use? The long number always works.
IT clears the old device, then sends you a fresh KAUST 2FA Enrollment email. While you wait, get your new phone ready.
When the email arrives, the rest of this guide works exactly as written. Keep going.
This sets the right store, app screens, and steps for you.
Tap your phone to continue.
Get the free Duo Mobile app from Cisco on the phone you are setting up.
On a computer? Scan to download.
On a computer? Scan to download.Check your KAUST inbox for an email titled KAUST 2FA Enrollment from Duo Security. Open it on your computer, then click the link to register your phone and activate Duo. That link opens the Duo setup page in your browser.
Cannot find it? Contact IT for a new enrollment link.
The setup page shows Protect Your KAUST 2FA Token Account. Click Start setup.
Duo Mobile adds KAUST 2FA Token to your account list. Your phone and your KAUST account are now linked.
On the My Settings and Devices screen:
You will see Enrollment Successful. You are done.
When you sign in, Duo sends a notification to your phone. Open it and tap Approve. Push needs an active internet connection, WiFi or 4G/5G.
No internet on your phone? Open Duo Mobile and read the 6-digit passcode shown next to KAUST 2FA Token, then type it into the login screen. Passcodes work with no connection at all.
Something on this page not matching what you see? Contact IT and we will help you sort it out.
