DUO Setup Guide

Follow the steps below to set up DUO two-factor authentication for your CMC account.

Shared Setup Steps (Required for All Methods)

  • Step 1: Log in to the CMC portal and select DUO Setup.

    DUO Setup login screen Enter password screen
  • Step 2: Begin device enrollment.

    DUO enrollment welcome screen
  • Step 3: Choose your device type (Mobile Phone).

    Choose device type in DUO
Option A: Setup with the DUO Mobile App (Recommended)
  • Step 4: Download the DUO Mobile app:

    App Store (iPhone) Google Play (Android)
    DUO Mobile app download screen DUO asking for phone number DUO confirming phone number
  • Step 5: Scan the QR code shown on your computer screen using the DUO Mobile app.

    Scan QR code with DUO app DUO app added successfully
  • Step 6: Approve the test notification.

    DUO push notification
  • Step 7: Log in! Setup is complete.

    DUO setup complete

✅ Recommended: The DUO Mobile app is the fastest and most secure method.

Option B: Setup with Phone Call or Text
  • Step 4: Enter your phone number into the enrollment screen.

    Enter phone number in DUO setup
  • Step 5: Choose your preferred method:

    • Text messages (SMS): DUO will send a code you must enter.
    • Phone call: DUO will call you and prompt you to press a key.
    Choose SMS or phone call
  • Step 6: Complete the test verification.

    Enter passcode for phone verification Successfully added phone number
  • Step 7: Log in! Setup is complete.

    Skip DUO app setup option Text or call authentication screen

ℹ️ Use this method if you cannot install the DUO Mobile app. on your device

Option C: RSA Token (Special Request)

CMC also supports hardware RSA tokens for users who cannot use the DUO Mobile app or phone/text verification.

To request an RSA token, please contact the IT Help Desk at help@cmccd.edu. You will need to:

  • Sign a form acknowledging responsibility for the device.
  • Understand that you are responsible for the RSA token while it is issued to you.
  • If the token is lost or broken, you will be required to pay for a replacement.

⚠️ RSA tokens are issued only when necessary and must be approved by IT.