DUO using Key Fob

What is a Fob?

A fob is a key chain that produces a 6 digit code when the button is pressed that lasts for about 10 seconds or so or until the code disappears from the screen. The device does not require an internet connection but can get out of sync if the button is pressed too many times in succession. The fob will need to be re-synced by a Duo admin if the code does not work when entered.

Related Tools

Sign In Using Key Fob

Signing in using a fob

Signing in using a fob

At SJSU Okta.website https://sjsu.okta.com/ enter your SJSUOne credentials

Click “Verify”

 

Enter a passcode from your Fob

FOB PASS CODE

Once entered you will be logged in and redirected

image-20240530-194011.png
image-20240530-194207.png

If you have another device set as your default you will have to click Other options in the authentication prompt and then select your Fob.

image-20240531-165708.png

 

Click the red power button on your Fob to generate a PIN and enter it in the Passcode field.

image-20240531-170251.png

 

 

image-20240531-171012.png

 

Tutorials

Assigning a Fob

Check their phone’s compatibility

  1. If device is compatible check DUO Admin to see if there is a phone listed but not added correctly > Remove phone > Help them add it again

  2. If device is not among compatible devices >Start a FOB request for them.

For Admin with access to hardware token:

Before you begin: Get hardware token aka. fob from the box

Step One

Sign into DUO Admin (Authorized Persons only) Refer to DUO - Signing in as ADMIN.

 

Search for SJSU ID then Click SJSU ID to open account

Search for SJSU ID then Click SJSU ID to open account

SJSU ID Number Found

Scroll to down to 'Add a hardware Token' then Click add a token

Scan or enter the token serial number on the back of the Fob then Click 'Attach Hardware Token'

image-20240531-172623.png

 


Remove Key Fob/Hardware Token

When fobs are removed, an existing or a new fob needs to be added.

  1. Login to Duo Admin account: https://admin-d132983a.duosecurity.com/login?next=%2F

  2. Use the search to look for the user profile using the SJSU id number

  1. This will open the profile for that SJSU id number

  1. Scroll to down the phone or hardware section depending on what they have to replace/reassign

Hardware for fobs
Phones for smartphone/mobile app

Click on the trash can to remove assigned fob or phone

  1. Click Remove


Resync fob

If user's fob passcodes do not work, you may need to resync the fob. If this fails, have the user exchange the fob.

  1. Pull up the user's account by searching their SJSU id number

  2. Scroll down to Hardware Tokens

  3. Click on the Serial Number of the fob to open the fob profile

  4. Click on Resync Token on the top right which open the next page

     

  5. Have the user generate and provide you with the next 3 passcode in order

Codes are generated by pushing the button the fob, this will need to be done 3 separate times for 3 separate codes.

  1. Click

Resync Hardware Token to resync the fob

  1. User should be able to log in with the next passcode generated. If this fails, have user exchange their fob.


Student Fob Return

  1. Take the fob(s) being returned.

  2. Obtain their Name and SJSU ID number, write it on a piece of paper, and attach it securely to the fob.

  3. Remove the former student/student assistant from the Duo Group that they were a part of.

  4. Give the fob with attached note to a staff member with Duo Admin access.