Enroll in MFA for VPN and CUIMC Services

NOTE: If you only need Duo for CUIMC email and Office 365 (not VPN), sign in to Web Outlook from off campus and follow prompts to set up your CUIMC Duo account. Additional instructions are here.

From a desktop or laptop, sign in to the CUIMC Duo Enrollment form using your UNI account. The form will prompt you to select the Multifactor Authentication (MFA) method(s) you would like to use with CUIMC services. At this point it is only used with CUIMC VPN, CUIMC email and Office 365 apps when off campus, and some CUIMC department specific Citrix environments.

    • This is required even if you already use Duo MFA for Columbia University
    • You will need to have the smartphone, tablet, landline or basic cell phone with you to complete and test when enrolling.
    • We strongly recommend adding more than one MFA method when enrolling. You can return to the enrollment form at any time to add or manage devices and methods.

    Not sure what to choose?  Duo Push on a smartphone or tablet tends to be the quickest and most secure way to authenticate.

    Mobile phones that cannot install the Duo app - such as older flip cell phones - can still be used for MFA.

    1. Sign in to the CUIMC Duo Enrollment form using your UNI account.
      TIP: This is the same account used for myColumbia or CourseWorks.
    2. Click the Start Setup button.
    3. Select Mobile Phone for the type of device you're adding.
    4. If needed, change the country associated with your device's phone number from the default United States.  Type in your mobile phone's 10 digit phone number.
    5. Check the "This is the correct number" box to confirm, then click Continue.
    6. Select Other at the What type of phone... prompt, then click Continue.
    Other device option on enrollment form.
    1. The cell phone will appear on the enrollment phone as Mobile, with its phone number next to it.  Set the When I log in field to the action you'd like Duo to use whenever you sign in to a CUIMC service requiring Duo MFA.
    2. Click Continue to Login to finish enrolling the mobile phone.

    We strongly recommend adding another method as a back up option in the event you do not have the smartphone with you.  Select the Add a new device link in the left side of the enrollment form and follow instructions to add another mobile phone, tablet or landline (desk or home phone).

    Add a new device link in the enrollment form

    You can set up MFA to call your desk, home, or other landline when you need to authenticate.  The phone will ring, simply answer it and follow prompts to accept or deny the request.

    1. Sign in to the CUIMC Duo Enrollment form using your UNI account.
      TIP: This is the same account used for myColumbia or CourseWorks.
    2. Click the Start Setup button.
    3. Select Landline for the type of device you are adding, then click Continue.
    4. If needed adjust the country associated with your landline, then type in the 10 digit phone number.
    5. Check the "This is the correct number..." box after verifying it was entered correctly, then click Continue.
    6. Click Call me to verify ownership of the landline's phone number.  Answer the phone when it rings, type the code you hear in to the enrollment form and click Verify.
    7. Once the code is verified, click Continue.  Your landline will be listed in the enrollment form.
    8. If needed adjust any Device Options or preferences for When I log in: 
    9. Click Continue to Login to finish enrolling the landline.

    We strongly recommend adding another method as a back up option in the event you are not at your landline.  Select the Add a new device link in the left side of the enrollment form and follow instructions to add another mobile phone, tablet or landline (desk or home phone).

    Add a new device link in the enrollment form.

    Duo MFA can be set up on iPads and Android tablets.  This lets you accept or deny an authentication request via the Duo app Push Notification on the tablet, or retrieve a passcode to enter when authenticating.

    1. Sign in to the CUIMC Duo Enrollment form using your UNI account.
      TIP: This is the same account used for myColumbia or CourseWorks.
    2. Click the Start Setup button.
    3. Select Tablet for the type of device you are adding.
    4. Select the type of tablet you are enrolling, iOS or Android, then click Continue.
    5. If your tablet already has the Duo app installed, skip to the next step. Otherwise follow instructions on the enrollment screen to install Duo Mobile, making sure to accept any access or notification prompts for the app on your tablet.
    Sample instructions to install Duo on the tablet.
    1. When ready, click I have Duo Mobile installed on the enrollment form.
    2. On your tablet, find Duo Mobile in your list of apps and tap on it to open.  If prompted, accept any requests from the Duo app for access or notifications.
    3. In the Duo app window, tap Add + in the upper right to add an account.
    Add account button in Duo app
    1. When prompted, hold your tablet up to the enrollment screen to scan the barcode that appears. A CUMC account will be added in the Duo app on your tablet.
    2. Click the Continue button on the enrollment form.
    Duo barcode activation screen
    1. Your tablet will be listed on the form under My Settings and Devices by its operating system type (iOS or Android).  Set the When I log in field to the action you'd like Duo to use whenever you sign in to a CUIMC service requiring Duo MFA.
    2. Click the Continue to Login button to finish enrolling the tablet.

    We strongly recommend adding another method as a back up option in the event you do not have the tablet with you.  Select the Add a new device link in the left side of the enrollment form and follow instructions to add another mobile phone, tablet or landline (desk or home phone).