Oct 2022: Universal Prompt

Starting on October 25, 2022, the Duo Web Prompt will change in appearance from the 'Traditional Prompt' to the new 'Universal Prompt'

  • The first time you see the Universal Prompt, your most secure enrolled method will automatically get a prompt. Click 'Other Options' to use a different method.
  • On subsequent prompts from that application/service, Duo will automatically use the last method that succeeded there.
  • You can add and remove authentication methods / devices at https://account.lehigh.edu/duo
  • The 'Remember me' feature now appears after you authenticate as a "Trust this browser" button in the same window.
  • All other second factor options (other than your default) are under the 'Other options' link.

For full information, see Duo's documentation.

Two-factor authentication, also referred to as 2FA, protects users from unauthorized access to Lehigh accounts in the event that a password is compromised. 2FA is currently only licensed and required for faculty and staff. You may already be familiar with 2FA if you've accessed sites that require it, such as for online banking. Two-factor authentication uses two pieces of information to establish your identity when you are trying to access a site or service:

  • The first factor is something only you know, such as your password.
  • The second factor is something only you have, such as your mobile phone (recommended).

General Info is on the Two-Factor Authentication Overview Page.

If your password is compromised through a phishing attack or other malicious means, a cyber criminal would also need your second factor to access your account.

Lehigh has contracted services from Duo Security to enable two-factor authentication on your Lehigh computing account. Duo's services allow you to choose the type of authentication method that works best for you: a push notification sent to your mobile device through the Duo Security app, a generated code each time you log in to a site or service, or another device such as a telephone to call you when two-factor authentication is needed.

Get StartedHow-to Articles and FAQ

Ready to enroll? Begin by completing the Lehigh Duo Security device enrollment options and adding your second factor device(s). Enroll as many additional factors as practical - its good to have .  For more information, refer to Two-Factor Authentication with Duo Enrollment Process.

Duo's instructions for using your devices:

Duo Mobile (Push Notifications or Passcodes): Apple iPhone, Apple Watch, Android Phone, and Windows Phone

Other Devices: Cell Phones and Landlines for SMS/Text or Voice Callback, Hardware Tokens and U2F Authenticators.

Two-Factor Authentication with Duo Prompt (SSO): How to provide your second factor when using Lehigh SSO.

Duo: Adding and removing New Devices: How to add and remove devices, sometimes referred to as "authentication methods".

If you are running privacy browser extensions, you might need to whitelist sso.cc.lehigh.edu.

Generate Duo Backup Codes: How to print backup codes in an event your primary factor, such as cell phone, is unavailable.

For answers to common questions, visit the Two-factor Authentication with Duo FAQ.

"Traditional" Prompt

New "Universal" Prompt

Universal Prompt: Other Options, Help Screen, Trust Browser Screen


Lehigh Videos

Enrollment examples

Sign In Video examples

Duo Videos