Duo just in time provisioning.
When a user attempts to log into any application which is protected by DUO, after their initial account setup, they will be presented with the following steps to setup their DUO account.

Step One: Introduction

Step Two: Choose Your Verification Method

• Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.
• Security key: Tap a WebAuthn/FIDO2 security key. Requires Chrome, Safari, Firefox, or Edge.
  o Only your organization's Duo administrator or help desk can add hardware tokens and Yubikey OTP tokens for you.
• Phone number: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo.

Duo Mobile

Duo Mobile is an app that runs on iOS and Android phones and tablets. It's fast and easy to use and doesn't require cell services. Duo pushes login requests to Duo Mobile when you have mobile data or Wi-Fi connectivity to the internet. When you have no data service, you can generate passcodes with Duo Mobile for logging in to applications.
The current version of Duo Mobile supports iOS 13.0 or greater and Android 8 or greater.

    1. Select your country from the drop-down list and type your mobile phone number, and then click Add phone number.

If you're going to use Duo Mobile on a tablet (like an iPad) with no phone service, don't enter a phone number and click I have a tablet instead.

2. If you entered a phone number, double-check that you entered it correctly and click Yes, it's correct to continue (or No, I need to change it to go back and enter the number again).

3. Download and install Duo Mobile on your phone or tablet from the Google Play Store or Apple App Store. Once you have Duo Mobile installed click Next.

 4. Open the Duo Mobile app on your phone or tablet and add this account by scanning the QR code shown on-screen.

If you aren't able to scan the QR code, tap Or email activation code and then enter your email address to send the activation link to yourself. Follow the instructions in the email to activate the new account in Duo Mobile.

5. When you receive confirmation that Duo Mobile was added click Continue.

Security Key
A security key is an external device that when tapped or when the button is pressed sends a signed response back to Duo to validate your login. Duo uses the WebAuthn authentication standard to interact with your security keys. You may also see WebAuthn referred to as "FIDO2".To use a security key with Duo, make sure you have the following:

• Obtain a security key fab from the CITS Helpdesk.
• Verify you have a supported browser installed: Chrome, Safari, Firefox, or Edge.

1. Read the security key information and click Continue.

    2. Your browser prompts you to tap your security key to use it with Duo

    3. When you receive confirmation that you added your security key as a verification method click Continue.

Phone for Call or Text
This option is suitable for mobile phones that can't run Duo Mobile, or office phones and landlines.
    1. Select your country from the drop-down list and type your phone number, and then click Add phone number.

If this phone number is a landline and can't receive text messages, select the This is a landline phone option before continuing. If you opted to add a landline, you can enter the landline's extension on the next screen and click Add extension or click Skip this step if you do not need to enter an extension for your landline.

2. Verify that the phone number shown (and landline extension, if you entered one) is accurate and click Yes, it's correct to continue (or No, I need to change it to go back and enter the number again).

    3. When you receive confirmation of adding the new mobile phone number for texts or calls, click Continue to login to log in to the application with a passcode received via text message or a phone call from Duo.

    4. When you receive confirmation of adding the new phone number for text messaging, click Continue to log in to the application with a passcode received via text message or a phone call from Duo.

    5. If you added a landline phone number, click Continue to log in to the application with a phone call from Duo.

After you add a all login verification methods, or if you chose to skip it, you'll arrive at the end of the Duo setup process. Click Log in with Duo to log in to the application using the Duo method you just added.