Duo for VPN

CU System Administration users must authenticate their identity to connect to the VPN. It takes two items – a password and your phone – to access Cisco AnyConnect. This decreases the likelihood that others can access your data, even if they have your password.

Get the Duo app

The Duo app will make authenticating your identity easy, giving you three authentication options: receiving a mobile push notification, entering a six-digit code from the Duo app or receiving a phone call.

How to enroll in Duo

Type vpn01.cu.edu or vpn02.cu.edu in your browser as a web address (Google Chrome, Firefox, Internet Explorer or Safari).  
Under the Group dropdown menu, select System-VPN-MFA. Then, enter your CU login credentials.
Select Add a new Device on the authentication menu.
We need to confirm that it's really you when enrolling in Duo Push. Select an authentication method to confirm your identity. 
Identify which device you will have the Duo Mobile app on, then click Continue.
Enter your phone number, then select that you want to replace it. This phone number is already in our system. Then, click Continue. 
To verify that you have this phone number, select to have a passcode either texted or called to the phone number. Enter in your passcode and select Verify. Once verified, click Continue. 
Select what type of phone you have, and click Continue. 
You can now download the Duo Mobile app in your phone's app store. 

Once you have downloaded the app, select I have Duo Mobile.  

A personalized QR code will appear. Open your Duo Mobile app and scan the QR code to register your device.
Once you have scanned the QR code, a green checkmark will appear over the code. Select Continue.  
You have now enrolled in Duo Push notifications! The next time you log in to the VPN, Send Me a Push is an authentication option.

  If you need assistance downloading the Duo app or using multifactor authentication, watch this UIS Service Desk webinar.

How to use the VPN and authenticate your identity

  Download the VPN guide

Step 1: Open Cisco AnyConnect on your desktop



Go to the Search bar.

Type VPN, and select Cisco AnyConnect Secure Mobility Client. 

A pop-up below will appear on the screen.

This is where you authenticate your identity.
VPN pop up image

 

Step 2: Select a VPN channel


From the Group drop-down menu, select the VPN channel you would like to use.
 
Group image
Select 1-System-SplitTunnel-Idp under the Group drop-down menu. When next logging in, 1-System-SplitTunnel-Idp will auto-populate. Users will have the option to switch groups when necessary.

Step 3: Enter your CU username and password


You will be redirected to a webpage to log into Ping. Enter your CU username and password.
 
Password image

Step 4: Select an authentication option

We recommend enrolling in Duo prior to first authenticating. This is required when authenticating with a mobile push notification or entering a code. 

How to enroll in Duo

Type vpn01.cu.edu or vpn02.cu.edu in your browser as a web address (Google Chrome, Firefox, Internet Explorer or Safari).  
Under the Group dropdown menu, select System-VPN-MFA. Then, enter your CU login credentials.
Select Add a new Device on the authentication menu.
We need to confirm that it's really you when enrolling in Duo Push. Select an authentication method to confirm your identity. 
Identify which device you will have the Duo Mobile app on, then click Continue.
Enter your phone number, then select that you want to replace it. This phone number is already in our system. Then, click Continue. 
To verify that you have this phone number, select to have a passcode either texted or called to the phone number. Enter in your passcode and select Verify. Once verified, click Continue. 
Select what type of phone you have, and click Continue. 
You can now download the Duo Mobile app in your phone's app store. 

Once you have downloaded the app, select I have Duo Mobile.  

A personalized QR code will appear. Open your Duo Mobile app and scan the QR code to register your device.
Once you have scanned the QR code, a green checkmark will appear over the code. Select Continue.  
You have now enrolled in Duo Push notifications! The next time you log in to the VPN, Send Me a Push is an authentication option.

You have three authentication options: Receive a mobile push notification, enter a six-digit code from the Duo app, or receive a phone call.

Option 1: Use the Duo App

The Duo App is the most secure way to authenticate your identity. 

Enroll in Duo

Type vpn01.cu.edu or vpn02.cu.edu in your browser.  
Under the Group dropdown menu, select System-VPN-MFA. Then, enter your CU login credentials.
Select Add a new Device on the authentication menu.
We need to confirm that it's really you when enrolling in Duo Push. Select an authentication method to confirm your identity. 
Identify which device you will have the Duo Mobile app on, then click Continue.
Enter your phone number, then select that you want to replace it. This phone number is already in our system. Then, click Continue. 
To verify that you have this phone number, select to have a passcode either texted or called to the phone number. Enter in your passcode and select Verify. Once verified, click Continue. 
Select what type of phone you have, and click Continue. 
You can now download the Duo Mobile app in your phone's app store. 

Once you have downloaded the app, select I have Duo Mobile.  

A personalized QR code will appear. Open your Duo Mobile app and scan the QR code to register your device.
Once you have scanned the QR code, a green checkmark will appear over the code. Select Continue.  
You have now enrolled in Duo Push notifications! The next time you log in to the VPN, Send Me a Push is an authentication option.

 

Open the Duo App. Duo mobile app logo
Press the refresh button. The app will generate a new six-digit code. Duo passcode image
Enter this code into the Duo Option field on your computer. Duo option field image
Press OK to log in. OK button image

Option 2: Mobile push notification

Enroll in Duo

Type vpn01.cu.edu or vpn02.cu.edu in your browser.  
Under the Group drop-down menu, select System-VPN-MFA. Then, enter your CU login credentials.
Select Add a new Device on the authentication menu.
We need to confirm that it's really you when enrolling in Duo Push. Select an authentication method to confirm your identity. 
Identify which device you will have the Duo Mobile app on, then click Continue.
Enter your phone number, then select that you want to replace it. This phone number is already in our system. Then, click Continue. 
To verify that you have this phone number, select to have a passcode either texted or called to the phone number. Enter in your passcode and select Verify. Once verified, click Continue. 
Select what type of phone you have, and click Continue. 
You can now download the Duo Mobile app in your phone's app store. 

Once you have downloaded the app, select I have Duo Mobile.  

A personalized QR code will appear. Open your Duo Mobile app and scan the QR code to register your device.
Once you have scanned the QR code, a green checkmark will appear over the code. Select Continue.  
You have now enrolled in Duo Push notifications! The next time you log in to the VPN, Send Me a Push is an authentication option.
You will receive a pop-up notification on your cell phone. Select the notification. Push Notification image
Select the green button to accept.

You are now logged in to the VPN.
Push acceptance image

Option 3: Receive a phone call

The phone number on file in the employee portal will be called. 
 Need to update your phone number? Instructions are available.
Contact details image
Answer the call, then press any key on your phone to log in.

You are now logged in to the VPN. 
VPN Connected image

Need to access a campus VPN?

CU Anschutz Medical Campus
CU Boulder
CU Denver
UCCS

Need assistance?

  • If you are having difficulty using the authentication system due to an out-of-date phone number, please contact your department's payroll liaison for assistance. In CU's human resources management tool, HCM, your payroll liaison can add a phone number to your employee record's cellular, campus 1 or campus 2 contact fields.
  • For other issues, please email the Service Desk at help@cu.edu. Please include your name, employee ID number, contact information and a description of the problem.