Two-Factor Authentication @ UNC Health - Getting Started


Getting Started

Before You Begin


Enroll in Duo

You must have at least one device (mobile phone or tablet) to begin.

If you are not already enrolled in Duo:

  1. Download the Duo Mobile app from your phones App Store.
  2. Go to the Duo Enrollment and Device Management page.
  3. Log in with your MyAccess ID and password.
  4. Follow the on-screen instructions to complete the enrollment process.
1) Select Start Setup 2) Enter the phone number, including area code, of the mobile device
3) Download the "Duo Mobile" app from the AppStore on your phone 4) Open the Duo App, click the + at the top right, and hold your phones
camera up to your screen to read the barcode
5) Enrolled! You can close the window OR click "Dismiss" to proceed to
the Device Management screen
Optional: Add an additional device or rename/reactivate existing devices
  1. You are now enrolled and may stop here! You will now be challenged for 2FA approval the next time you login to a 2FA Protected application, as shown in the "Logging in with Duo" section below.

Logging in with Duo

Via Duo Push (Preferred)

At Login On Your Phone

Via Passcode

At Login On Your Phone

Add & Manage Your Devices

After you have enrolled your first device, you can add more devices and manage your existing devices.

Please Note: At UNC Health, we do not currently support SMS Codes, Phone Callback or Hardware tokens for authentication.

To add or manage devices:

  1. Go to the Duo Enrollment and Device Management page.
  2. Log in with your MyAccess ID and password.

I need help recovering my existing device!

About Two-Factor Authentication

About Two-Factor Authentication @ UNC Health

To keep sensitive information (like PHI) safe, UNC Health uses a security method called “Two-Factor Authentication” With this method, you verify that “you’re you” before you see certain sensitive information or access certain applications.

A traditional form of verification is your username and password, but if your domain credentials get compromised, an unauthorized person could access your account.

Two-Factor Authentication adds a second step to the verification process. This can be something you have, such as an ATM card, or something that is part of you, such as a fingerprint. At UNC Health we use your mobile phone to provide the second step. Combining this second step with your MyAccess ID credentials adds security to your confidential information.

Frequently Asked Questions



What if my push alerts aren’t coming through?

I receive "Access Denied" when trying to login to an application.

I replaced my 2FA device and cannot login.

If you replaced or factory-reset your phone, Duo will longer function. See scenarios below for more.

I have multiple devices enrolled on my account

If you have more than one device enrolled, you can visit the Duo Enrollment and Device Management page and authenticate to Duo with your other functional device. The "manage your devices" portal will appear. Select manage next to the inactive device and click "Reactivate".

I have a new device, and it has the same phone number.

  1. Open the Duo App on your phone and look for the UNC Health logo. (If you do not see the UNC Health logo proceed to "I have a new device, and it has a new phone number".
  2. Select the "Reconnect" link to the right of the UNC Health logo.
  3. Log in when prompted with your MyAccess ID and password.
  4. At the Duo prompt, select the Enter a Passcode option, then tap Text me new codes on the blue bar at the bottom of the Duo window.
  5. Enter the temporary passcode you were sent via text message into the passcode box within the Duo window and tap "Log In".
  6. Reconnect should no longer show to the right of the UNC Health logo. The device is active!

I have a new device, and it has a new phone number.

  1. Call the UNC Health Service Desk (984-974-4357 Option 2 Duo/password)
  2. Ask to have your old mobile device removed from your account.
  3. Enroll your new device at the Duo Enrollment and Device Management