Overview

Duo is a two-factor authentication which adds a second layer of security to your network account. Verifying your identity prevents anyone else from logging into your account, protecting you and Oakland Schools data from security vulnerabilities.

Why Do I Need This?

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.

Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.

This second factor of authentication is separate and independent from your username and password — Duo never sees your password.

Where can I find more information?

DUO has their own full-fledged guide that assists and answers any questions one might have on their website.

Enrollment Process (Oakland Schools - Administration Building Staff)

To use DUO, first connect (enroll) your account with at least one mobile device number and/or the DUO Mobile application. DUO has a video and step by step guide on their website.

1. Login to https://webmail.oakland.k12.mi.us on any device and select Start Setup
2. Select the type of Device you'd like to enroll and click Continue. 
   We recommend using a smartphone for the best experience and will be using it in this guide. You can also enroll a landline telephone, Security Key, or an iOS/Android tablet.
   
3. Type Your Phone Number, verify the number and check the checkbox, and then click Continue.
   Select your country from the drop-down list and type your phone number. Use the number of your smartphone, landline, or cell phone that you'll have with you when you're logging in to a Duo-protected service. You can enter an extension if you chose "Landline" in the previous step. Then double-check that you entered it correctly, check the box. If you're enrolling a tablet you aren't prompted to enter a phone number.
   
4. Choose your device's operating system and click Continue.
   
5. Install Duo Mobile App on your Smartphone or Tablet then click I have Duo Mobile installed.
   Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Without it you'll still be able to log in using a phone call or text message, but for the best experience we recommend that you use Duo Mobile.
   Follow the platform-specific instructions on the screen to install Duo Mobile.
   
6. Activate Duo Mobile then click Continue after linking successfully.
   Activating the app links it to your account so you can use it for authentication. On Smartphones and tablets, activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the platform specific instructions for your device. The "Continue" button is clickable after you scan the barcode successfully.
   Can't scan the barcode? Click Or, have an activation link emailed to you instead. and follow the instructions.
   

7. Configure Device Options (optional)
   You can use Device Options to give your phone a more descriptive name, or you can click Add another device to start the enrollment process again and add a second phone or another authenticator.
   If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" or "Automatically call this device" and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

   

Note:  If you are using Google Chrome as your browser, you may be prompted to update your browser. Follow the prompted directions to update your browser the latest version.

Congratulations!

Your device is ready to approve Duo authentication requests.

Enrollment Process (Oakland Schools District Staff)

District staff members who require VPN access are required to use DUO two factor to authenticate before they can complete connecting.

1. Install the DUO Mobile Application on a device
2. Await a text containing DUO instructions, and a link that will authorize your account on the Duo Mobile App installed on that device.

Installing DUO Mobile

DUO Mobile is a mobile device application used as a method for approving DUO authentication requests. Navigate to your device's application store and download the application. Once downloaded, follow the appropriate DUO Enrollment Process for the type of staff member you are (Oakland Schools Administration Building Staff, or Oakland Schools District Staff) to link your account to the application.

Authorizing Two Factor Authentication

Once you have connected your DUO account to your mobile app or mobile phone number, here are the ways to authorize two factor requests through the DUO interface.

Duo Push

1. Login to https://webmail.oakland.k12.mi.us on any device and select Duo Push
   Users authenticating through a VPN will have this done automatically.
   
   
2. Open the DUO app on your phone and tap the Request Waiting button at the top when it appears
   
3. Tap Approve on the Duo app login request 
   

Call Me

1. Login to https://webmail.oakland.k12.mi.us on any device and select Call Me
   Users authenticating through a VPN will have this done automatically.
   
   
2. Await a call from DUO and accept it. In this case it is from the Service Desk number at +1 (248) 209-2060.
    
3. Open the number pad while connected to the call and press any key, then hang up.

Passcode

1. Login to https://webmail.oakland.k12.mi.us on any device and select Enter a Passcode

   
   

   
   

2. Open the DUO app and tap on the section labeled "Oakland Schools".
3. There will be 6 numbers now on the under that section. Enter those numbers into DUO on the computer. Then click Log In.
   
   
   1. On the computer, you can also tap "Text me new codes" in the bottom right to have codes texted to the attached phone number. Enter ONE, six number series into the text box on the computer and click Log In. 

Add Another Device

Adding another device to the dropdown menu when authenticating is very easy! This will allow you to select from multiple devices when authenticating,

1. Login to https://webmail.oakland.k12.mi.us on any device and select Add Another Device from the left hand side.
   
2. Authenticate with an already attached device.
3. Follow the enrollment steps outlined in DUO Enrollment Process (Oakland Schools - Administration Building Staff)

Change Settings & Devices

Changing DUO settings or specific devices settings is also very simple. This will allow relinking your account to the DUO Mobile application as well.

1. Login to https://webmail.oakland.k12.mi.us on any device and select My Settings & Devices from the left hand side.
   
2. Authenticate with an already attached device

Troubleshooting

Not Getting DUO Push Notifications

If your device is not getting DUO push notifications, open the DUO app and manually accept the app push instead of waiting for the device notification popup. Mobile devices may not properly show DUO notification popups.

Reactivate an Account to DUO Mobile App

If the activated device(s) have been lost, phone number changed, or access to it has been lost as a whole, there are a few ways you can reactivate your account to the DUO mobile app.

If the new device still has the previous phone number, navigate to the DUO menu at https://webmail.oakland.k12.mi.us/ and go to the "My Settings & Devices" section.