What is the Duo Universal Prompt?
The Duo Universal Prompt is the "Check for a Duo Push" screen that appears immediately after logging into web-based services using Single Sign-On (SSO) system.
Some services may not use this prompt, which include:
- CISSVC vCenter Server
- Cisco AnyConnect VPN
- CMS tools
- Any service that does not use a browser with the Universal Prompt.
Although we recommend the Duo Push model for MFA, we recognize this may not always be an option or that there may be an issue with receiving the prompt. In order to login to many systems requiring MFA, you may have to take additional steps to be successful. These steps are only necessary if you are not setup for Duo Push or if the push solution is not working for you. These steps are not necessary for web-based access to services that use single sign-on (SSO).
Login Without Universal Prompt
When logging into a system that does not use the Duo Universal Prompt, you will enter your username and password then automatically receive a push notification or phone callback, depending on your Duo preferences. The system you are logging into will give no indication that this is happening.
If you would like to specify what kind of Duo notification you want to receive upon login, you may add a comma (",") to the end of your password and append a Duo factor option:
| push |
Perform Duo Push authentication. You can use Duo Push if you've installed and activated Duo Mobile on your device. |
| phone |
Perform phone callback authentication. |
| sms |
Send a new batch of SMS passcodes. Your authentication attempt will be denied. You can then authenticate with one of the newly-delivered passcodes by appending one to the end of your password. |
| A numeric passcode |
Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. Examples: "123456" or "2345678". |
Below is an example of this where ",sms" has been added to the end of the password.
As indicated in the table, this first login will fail, you will receive an SMS text message with the code. Repeat the login with a comma and that code appended to the password and the login will be successful.