What is Two-Step Login?

Two-Step Login provides an extra layer of security on websites and services that contain sensitive information. It uses multifactor authentication to verify your identity when you log into systems like MyUI, ICON, Office 365, Employee Self Service, and more.

Process illustration showing computer, mobile phone, and checkmark signifying login success

The university uses Duo Security tools—including the Duo Mobile app—to manage the Two-Step Login process. Push notifications to the Duo Mobile app are the safest, fastest, and most reliable way to complete your two-step logins.

Getting started with Two-Step Login

Set up and manage your Two-Step Login account through the university’s Account Center, accessible via the HawkID Tools page.

We recommend using push notifications to the Duo Mobile app on a mobile phone or tablet as your primary Two-Step Login method:

  1. Download the Duo Mobile app on your phone or tablet.
  2. Go to the HawkID Tools page, click “Manage Your Two-Step Login with Duo Account,” and log into the Account Center with your HawkID and password.
  3. Follow the instructions to add your phone or tablet and set up Duo Mobile.

From the Account Center, you also can enroll another device or phone number as a backup method, generate backup codes, and more. See detailed instructions below.

Follow these instructions to set up and enroll in Two-Step Login for the first time.

First, Go to the HawkID Tools page, click “Manage Your Two-Step Login with Duo Account,” and log into the Account Center with your HawkID and password.

If you're new to Two-Step Login, you'll see an information screen. Click "Set up Two-Step Login" to proceed.

Screen shot showing Two-Step Login enrollment info

Next you'll add the device or phone number you'd like to use to authenticate your logins—choose the option you prefer from the "Type" dropdown. We recommend using a mobile phone or tablet with the Duo Mobile app as your primary authentication method.

Screen shot showing device-add options

To add a mobile phone/tablet:

  1. Enter a descriptive label for your device.
    Screen shot showing device-label field
  2. Enter your phone number if you like (you won’t need it if using the Duo Mobile app). Click “Continue.”
    Screenshot showing phone number field
  3. Follow instructions for setting up Duo Mobile. If you haven’t already installed the app on your device, install it now.
  4. Open the Duo Mobile app and scan the QR code. (If you are working from the same mobile device you want to add, click the “Add Duo Account” button.)
    Screen shot of set up on mobile phone
  5. Duo Mobile will create an account for your University of Iowa logins.
    Screenshot showing University of Iowa account info
  6. Click “Verify Duo Push” to send a push notification to Duo Mobile on the device you’re adding. Open Duo Mobile and click the green “Approve” button.
    Screenshot showing login approval options
  7. You’re now enrolled in Two-Step Login. You’ll use your device and the Duo Mobile app to verify your logins.

 

To add a landline phone number:

  1. Enter a descriptive label for your phone number (for example, “home phone”).
  2. Enter your phone number. Click “Continue.”
  3. Click “Verify Phone Call.” Answer the call at the number you’ve provided and follow the voice prompts.
  4. You’re now enrolled in Two-Step Login. You’ll verify your logins using calls to the number you’ve added.

Follow these instructions to add a new mobile device, phone number, or token to an existing Two-Step Login account.

First, go to the HawkID Tools page. Scroll down and click “Manage Your Two-Step Login with Duo Account.” Log into the Account Center using your HawkID and the Two-Step method you’ve previously set up.

Once logged in, choose “Phone/Tablet” from the “Add Device” dropdown to add a mobile device or a landline phone:

Screenshot showing add-device options

To add a new mobile device:

  1. Enter a descriptive label for your device.
    Screen shot showing device-label field
  2. Enter your phone number if you like (you won’t need it if using the Duo Mobile app). Click “Continue.”
    Screenshot showing phone number field
  3. Follow instructions for setting up Duo Mobile. If you haven’t already installed the app on your device, install it now.
  4. Open the Duo Mobile app and scan the QR code. (If you are working from the same mobile device you want to add, click the “Add Duo Account” button.)
    Screen shot of set up on mobile phone
  5. Duo Mobile will create an account for your University of Iowa logins.
    Screenshot showing University of Iowa account info
  6. Click “Verify Duo Push” to send a push notification to Duo Mobile on the device you’re adding. Open Duo Mobile and click the green “Approve” button.
    Screenshot showing login approval options
  7. You’ve now added a new mobile device and can select it from available options to verify your logins.

 

To add a new landline phone number:

  1. Enter a descriptive label for your phone number (for example, “office phone”).
  2. Enter your phone number. Click “Continue.”
  3. Click “Verify Phone Call.” Answer the call at the number you’ve provided and follow the voice prompts.
  4. You’ve now added a new landline phone and can select it from available options to verify your logins.

Adding a token device requires entering information associated with a hardware token device you’ve been provided. Learn more about requesting token devices.

To add the Duo Mobile app to a device with a phone number you’ve already enrolled, delete your previously enrolled number and re-enroll the device:

  1. Install the Duo Mobile app on the device you want to re-enroll.
  2. Log into the account center (accessible from the Hawk ID Tools page).
  3. Look for your “Devices” list on the main Two-Step Login with Duo page. Click the device/phone number you want to re-enroll.
    Screenshot of device list
  4. Click “Delete this Device” and confirm your decision.
  5. You’ll be returned to the main Two-Step Login with Duo page. From here, go through the process described under “Adding a new device or phone number” above.

You can generate a set of backup codes to use as an alternative to a push notification or phone call.

  1. Log into the account center (accessible from the Hawk ID Tools page).
  2. Look for “Backup Codes” on the main Two-Step Login with Duo page. Click “Generate Codes.”
    Screenshot of code options
  3. Confirm you want to generate a new set of codes (it will invalidate any previous set).
    Screenshot of dialog box
  4. You’ll see a set of 10 codes. Screenshot, copy, or write down the codes.
    Screenshot of code set
  5. Click “Cancel” when finished or “Generate Codes” to create a new set.

The codes you’ve generated will work only with your HawkID and password. To use them, choose “Enter a Passcode” as your authentication method when completing a login. Enter any code from your set—each can be used just once.

 

Article number: 
106591
Last updated: 
September 16, 2022