Setup Guide for Kaplan/Purdue
Global Duo Users
Background
The purpose of this document is to walk Kaplan users through the process of setting up their
OneLogin account to use Duo Security Multi-Factor Authentication MFA. Over the next few
months we will be turning Duo MFA on for your Kaplan Gmail(where applicable) and Workday
access. IT is IMPERATIVE that you step through this process prior to when we roll out
Duo MFA to your business unit in order to assure your access is uninterrupted.
What is Multi-Factor Authentication (MFA)?
It is the use of multiple components (or “factors”) used for logging into a computer system or
application ensuring a higher level of security. Usually the factors include both something the user
knows – a password, along with something the user has – a token or device in the user’s possession.
1st Factor Email Address + Password
Duo Mobile App you will install on your Smartphone (iPhone, Android, Windows)
OR
nd Phone Call you will receive on a touchtone phone (desk phone)
2 Factor OR
Passcode you will receive on a SMS capable phone
With Duo for G|H OneLogin, rather than using only a password, you will need to have a phone or mobile
device to sign in – it will be your second factor. This protects you and the company from loss of sensitive
personal information by preventing a hacker from gaining access with just your password.
Login to OneLogin
Set Up Duo
1. Select the “Duo Pre-Registration” icon from the OneLogin dashboard. You will likely
need to click the “Company” tab to find the icon.
2. You will be redirected to a page titled “Protect Your Graham Holdings Account.” Click
“Start setup.”
3. You’ll be presented with three (3) device options. It’s recommended that for initial setup
you use your mobile phone. Select your device type and click “Continue.”
4. Follow prompts for adding your device until you reach the screen below.
5. You will need to download and install the Duo Mobile app to your phone from either
the Apple, Android, or Windows app store. [INSTRUCTIONS]
Once it’s installed, select “I have Duo Mobile” from your desktop.
For help you may contact the Kaplan Service Desk at 1- 855-892-7396 (Toll Free)
Duo Mobile must be allowed to receive notifications and access the camera
Note: DUO Mobile is an application that runs on your phone and helps you authenticate. Without it you'll still be able to log in
using a phone call or text message, but we strongly recommend that you use Duo Mobile to authenticate quickly and easily
6. On your phone open the Duo Mobile app, tap the “+” button, scan the barcode on
your computer screen and click “Continue” on your computer.
7. Your device will be listed and set as the default device for your account. When
prompted to do so, be sure to choose “Ask me to choose an authentication
method.”
This is very important! If you do not choose this option your authentication
method will be limited to a push to your default device. You will then lose the
ability to request phone calls or pass codes in the event your default device
becomes unavailable or needs to be replaced.
8. You may click “Continue to login.” HOWEVER, we strongly advise that you select “+ Add
another device” and follow steps 3-7 again to add your landline work phone, home
phone, tablet, etc. Doing so will ease any pain in the event that your mobile phone
becomes lost or damaged, is replaced or the battery is exhausted. If you are an Apple
macOS user, please read the Note about Apple macOS computers on page 9 before
proceeding. After adding a secondary/backup device, choose “Continue to Login”.
9. Enrollment successful! This is the Duo login prompt that you’ll normally see when
logging in. Choose an authentication method.
It is strongly recommended that you use “Send Me a Push” See below.
Why Duo Push is better:
Duo Push is an authentication request you’ll receive as a notification on your smartphone. It
requires you to have the Duo Mobile app installed and activated. It’s quicker, easier, more
secure, and cheaper than receiving SMS messages or phone calls.
SMS messages require reading a passcode and then typing it into your computer. Phone calls
require actually answering the phone. Duo Push is as simple as tapping a notification on your
smartphone. Each time you receive an SMS passcode or phone call from Duo a telephony
credit is used, costing the company money. There is no limit or charge associated with
receiving pushes.
A couple of key things to note:
● Duo Mobile uses very little data. Five hundred (500) pushes to your device will use 1 MB
of data.
● Duo Mobile has no more access or visibility into your phone than any other app. It can’t
read your emails, can’t see your browser history, and requires your permission to send
notifications.
Here’s a quick overview video for more information.
Please make note of these instructions regarding the Duo Self-Service portal, where you can
change device names, enroll additional devices, set a default device, and more.
Using “Call Me” as an authentication method:
1. Click “Call Me.”
2. You will receive a phone call from Duo. Press any key on your phone to login.
Using “Enter a Passcode” as an authentication method:
1. Click “Enter a Passcode.”
A. Go to the Duo Mobile app on your phone, and tap the green key next to
“Graham Holdings.” Enter the code on your computer, and click login.
B. Click “Text me new codes” as shown below. Enter the first code on your
computer, and click login. Duo keeps track of which SMS passcodes you've
already used in your batch, letting you know which one to use next.
Note about Apple macOS computers:
Newer versions of macOS automatically hide scroll bars. (The two screenshots below illustrate
this.) Because the Duo console is limited in size, users have reported confusion while navigating
through longer pages. If you seem to be on a screen that is cut off or buttons seem to be
missing, try placing your mouse cursor anywhere in the Duo console on your computer and
then scrolling up or down.
FAQ’s
Question: My iTunes/Android/Windows ID is my personal account
Answer: This is okay! It is only being used to download the app. The app will be
configured without your personal account.
Question: The barcode won’t scan
Answer: Make sure the barcode is displayed on your monitor.
Make sure there is not a privacy screen on your monitor.
Try rotating your phone 90 sideways with the camera pointed at the barcode.
Try clicking “cancel” on the app and clicking the “add account” or “+” sign again.
Question: I didn’t receive a push notification
Answer: Open the app and check again – it may be displayed as a green bar towards the
top of the app.
Question: I got a push/call/text from Duo, followed the directions, and still can’t get in
Answer: The very first time, you will have to do it twice. The first time is to set up
registration. Click “Log In” a second time and you should receive another
push/call/text.
Question: I accidentally denied the app authorization to push me notifications
Answer: You’ll have to go and change this manually in your phone settings
*******
INSTALLING THE DUO MOBILE APP
1. Go the App Store (iOS) or Google Play
(Android).
2. Enter "duo mobile" in the search box, and then
select duo mobile from the search results.
3. Tap the button to install Duo Mobile.
4. After Duo Mobile has installed, tap to open the
app.
5. Tap OK to allow notifications from Duo Mobile.
6. Tap Accept to accept the license agreement.
*******