As of May 16, 2019, UI Anywhere VPN users are required to use Two-Step Login to verify and complete their VPN connections.

UI faculty, staff, and students access the VPN using Cisco AnyConnect software and their HawkID credentials. To connect to the VPN, enter your HawkID credentials into AnyConnect as usual, then enter your preferred Two-Step Login authentication method into Any Connect's "Second Password:" field.

Please review the authentication method you are using for Two-Step login. Your authentication method and other setup details are found on the Two-Step enrollment page:

Screenshot showing Duo setup details

Push notifications to the Duo Mobile app on your phone are the fastest, easiest authentication method, but you also can use phone calls, text messages, and pre-generated passcodes to connect to the VPN. (Follow these instructions to switch to push notifications.)

Enter your preferred method in the AnyConnect "Second Password:" field to complete your VPN login:


Enter “push” (without quotation marks) to receive a push notification if you are using the Duo Mobile Push app.


Enter “phone” to receive a phone call at the number you’ve enrolled for two-step logins. Respond to the call to complete your login.


Enter “sms” to receive a list of passcodes via text. Your initial authentication attempt will be denied. Repeat the process and enter one of the new passcodes you’ve received.

(passcode number)

Enter a valid passcode number received via text, generated by the Duo Mobile app or a token device, or generated from the Two-Step enrollment page.  


If you’ve enrolled more than one phone or other device in Two-Step Login, your default device will receive the notifications. Find your default device (and any other devices you've set up) in your Two-Step Login settings:

Screenshot showing Duo setup details


You can direct push notifications, phone calls, or texts to your secondary device by entering “push2,” “phone2,” or “sms2,” respectively. Follow these instructions to view or change your default device

Follow these instructions to complete your VPN login using a push notification:


1. Launch the Cisco AnyConnect client (review AnyConnect download, installation, and configuration instructions). If necessary, enter or select "" and click/tap the "Connect" button.


2. "Default" will appear in the "Group:" field—leave this unchanged.


3. Enter your HawkID in the “Username:” field.

Screenshot with username field highlighted


4. Enter your HawkID password in the “Password:” field.

Screenshot with password field highlighted


5. Enter the word “push” (without the quotation marks) in the “Second Password:” field. (Note that the characters you enter will not be shown.)

Screenshot with second password field highlighted

To use a different, non-push method or to authenticate using a secondary device, refer to the table above.


6. Click or tap the “Connect” or “Okay” button.


7. Respond to push using the Duo Mobile app on your preferred mobile device (review Duo Mobile set-up and management instructions).


Article number: 
Last updated: 
May 17, 2019