Using Duo with Touch ID (macOS)

Table of Contents

• Context
  • Touch ID and Duo
• Adding a Device for Touch ID
• Authenticating with Touch ID

Context

You can enroll in using Touch ID during the initial self-enrollment process, or if you have already enrolled in Duo using a different device (like your mobile phone), you can add Touch ID as an additional authentication device from the device management portal.

If you have more than one MacBook with which you would like to approve Duo login requests using Touch ID, you will need to enroll each of them separately as a new Touch ID device in Duo.  

Touch ID and Duo

With Touch ID on MacOS, you can have secure Duo login approvals resistant to phishing attacks combined with the one-touch convenience you are already used to with Duo Push. In order to use Touch ID with Duo, make sure you have the following:

• A MacBook Pro or MacBook Air with a Touch ID button and iCloud Keychain.
• A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
• The Universal Prompt supports Chrome (Desktop and Mobile), Firefox, Safari (Desktop and Mobile), Edge, and Internet Explorer.
• If your browser or client is not compatible, Duo will show you the traditional prompt experience instead.

Adding a Device for Touch ID

• In your web browser, navigate to a resource that is protected by Duo- Office.com or Box.
• On the Duo authentication page, select Other Options, and then Manage Devices.
  • Please authenticate before continuing.

• Select TouchID as your device and continue.

• You will be prompted to "Use Touch ID to sign in?"

• You may also be asked through Duo Mobile if you recently added a device (Touch ID) to your account. 
  • Verify that this was you by clicking Yes, this was me.

• You have now enrolled your Touch ID, click Continue to return to your Duo Devices page.

• After authenticating, your Touch ID should appear along with your mobile device (if you have one registered). 
  • Click Back to Login to access your desired website.

Authenticating with Touch ID

• The next time you log on using Duo, you can select Touch ID from the drop-down list of your authentication devices.
• Click on Use Touch ID and touch the Touch ID button when prompted.