Do the following steps to enroll a new user in Duo.


  1. Make sure the user has either "secDUOEnforceMFA" in the "Member Of" the user being enrolled.
  2. Have user log into computer.
  3. Sync Azure AD.
  4. Sync Duo Users.
  5. Download "Duo Mobile" from the App store on either their work issued phone or personal phone. (Only if the person is fine with downloading it on their personal device.)
  6. Once the app is installed, go to their email, look for an email from "Duo Security."
  7. Click the top Link.
  8. In the app, Click "Duo Mobile."
  9. Click “Add Account" and Scan the QR Code.
  10. The “Account Name” can stay default, “Allow all Notifications” and send by “Duo Push”.
  11. Click “continue” on the computer and “Skip the Practice.”
  12. Lock the Computer.
  13. Have the user sign in.
  14. They will now be prompted to sign in via duo push notification.
  15. Click & Check box “Remember me for 12 Hours.”
  16. Activate Duo Offline Code.
  17. Click “Add Account” in the top right of the App.
  18. Scan the QR Code and Leave the default name.
  19. Click “Activate Offline Code”
  20. In the app, Click “Show” next to the offline code and type the 6-digit code.


If Duo does not prompt at login, please use this article: How To: Duo for Windows Logon not working


The user is now enrolled into Duo Authentication! Please Update this article if anything changes as this will be used for new user setup.