Duo Two-Factor Authentication

Kevin Dale's picture

Two-factor authentication verifies your identity on a separate device (e.g., your smartphone) through a 3rd party application known as Duo.

Systems that require Duo include:

  • VPN (
  • Outlook Web ( when not at UCSF. Access from mobile email clients is not affected.
  • Connect Portal - Duo for APeX Connect Portal ( will roll out from 7/24 to 8/14.
    • Starting 7/24: If your APeX login (UCSFMC account) is already enrolled in Duo, you will be prompted to use Duo when you sign into Connect Portal.
    • From 7/31–8/14: If you are new to Duo, or are using Duo only with your “Campus” or “SOM” account, you will need to enroll your APeX login (your “UCSFMC” account) with Duo. During this period, look for an email from [email protected] with the subject line “Duo Security Enrollment” to complete your enrollment. Once you receive the enrollment email, you will be required to use Duo the next time you sign into Connect Portal or by 8/14, whichever is sooner.
    • Starting 8/14: All access to Connect Portal, on or off the UCSF network, will require Duo.
    • Community Connect Users: Look for an email starting 7/10 and enroll by 7/24.
  • ServiceNow - coming soon

What is Duo?

Duo is a third-party application that UCSF uses for two-factor authentication. It requires second verification on another device (something you have with you, such as your smartphone) to authenticate your identity.

Duo provides several authentication options, but the most convenient is through the Duo Mobile smartphone app.

To download the app, click the appropriate link below for your smartphone:

Or search for “Duo Mobile” in your phone's app store.

How do I Enroll?

Check your inbox for an email titled "Duo Security Enrollment" from "[email protected]." Receipt of this email means you have been automatically enrolled and can simply follow the directions in the email.

To complete enrollment you will need a phone - either a mobile phone that can receive text messages, or a landline. As you proceed with the steps, you will then be prompted to enter your number to perform a one-time activation.

You are now enrolled in Duo!

If you did not receive this email please follow the instructions on our Duo Manual Enrollment page.

Note to incoming students and staff: If you are accessing your email for the first time and you are not at UCSF, you will be prompted to enroll in Duo when you log in at Follow the on-screen prompts to enroll. If you need assistance please contact the UCSF IT Service Desk.

Note to Zuckerberg San Francisco General staff: If you’re using ZSFG's WebConnect, the Duo app is already installed on your phone. You can use the same app for UCSF systems like VPN and Outlook Web.

How do I use Duo once I'm enrolled?

Watch a video on using Duo with a Windows PC below.

For more information please see our Duo Login Experience page for samples of how Duo works with specific applications, and see the Duo Authentication Methods page for all of the different ways you can authenticate with Duo.

What if I have questions?

We welcome your questions!