Setting up Duo Mobile MFA

Multi-Factor Authentication (MFA) adds a second layer of security to your SJSUOne account by verifying your identity using a second factor provided through the free Duo Mobile app. Duo can prevent someone from logging into your account, even if they know your password. To activate Duo MFA for your SJSUOne account you will need to scan a QR code on a screen using your phone. You will need two devices to complete this process.

  1. Install the Duo Mobile app on your phone or tablet
  2. Set up your SJSU account, using your computer or a second mobile device. The first time you log in to one.SJSU, a series of prompts will guide you through the self-service Duo Mobile MFA enrollment process.
  3. Set up Duo Restore to make it easy to move to a new mobile phone in the future

You will need to install Duo Mobile on one device, and sign in to on another device.

Set up Duo Mobile on your Smartphone

The following procedure is for setting up the Duo Mobile multi-factor authentication app on a mobile device. For security, Duo MFA is required for accessing your SJSU digital content. If you do not have a smartphone or tablet, or you do not want to install Duo on your device, contact the IT Service Desk (408-924-1530) to request a hardware token (key fob).

  1. On your mobile device, download and install the Duo Mobile application from the App Store or Google Play.
    Duo Mobile icon in the Google or Apple App Store.
  2. On your mobile device, open your internet browser and go to
  3. Tap the menu in the upper right. Mobile Menu Button with words "Tap This"
  4. Click Sign In.
  5. Enter your SJSU ID and password, then tap Sign In.
  6. When prompted to “Protect Your San José State University Account,” tap Start Setup.
  7. Select the type of device you’re adding, Mobile Phone or Tablet, then tap Continue.
  8. Complete one of the following:
    • If you selected Mobile Phone for your device:
      • Enter and confirm your phone number (including area code), then tap Continue.
      • Select the type of device (iOS or Android) and tap Continue.
    • If you selected Tablet for your device:
      • Tap Continue.
  9. Within one.SJSU, tap I have Duo Mobile.
  10. Tap Take me to Duo Mobile.
    Prompt from DUO Mobile to complete set up.
  11. Within the Duo app, tap Save.
    By default, the account name is set to “San Jose State University.”
    DUO Mobile Prompt to name the account being set up.
  12. Go back to your internet browser and tap Continue from the Duo screen.
  13. If the settings and devices are correct, tap Continue to Login.
  14. Choose one of the following:
    • Select Send Me a Push to send a quick approve-or-deny prompt to your device.
    • Select Enter a Passcode to use the six-digit passcode displayed in the Duo app.
  15. Complete login.
  16. When prompted by OKTA, complete the following:
    • Choose a security question from the drop-down menu, or create your own question, then provide an answer (Required).
    • Add a secondary email (Optional).
      NOTE: If assigning a secondary email, the secondary email should match the email you used when you applied to SJSU. If you need to update your secondary email, you must first complete all OKTA steps. For instructions on changing your secondary email, see Set My Preferred Email Address.
  17. Tap Create Account.

Setup recovery with Duo Restore

This procedure is optional but recommended to ensure that you maintain access to your SJSU account if you get a new device or need to reset your device to factory settings.

Enable/Disable Auto-Push for MFA

You can streamline your multi-factor authentication process when logging in by enabling auto-push to automatically prompt you to authenticate using your method of choice via the Duo Mobile app.

This procedure is optional.

To enable auto-push:

  1. Visit the Multi-Factor Authentication Profile page.
  2. Enter your SJSU ID and password and click Login.
  3. Before authenticating with MFA, select Settings > My Settings & Devices.
    Duo Mobile Screen with options to select My Settings & Devices.
  4. Complete multi-factor authentication as normal.
  5. Under Default Device, select your default device from the drop-down list.
  6. Under When I log in, select Automatically send this device a Duo Push.
    Duo Mobile Push Selection
  7. Click Save.

NOTE: To turn off auto-push for MFA, select Ask me to choose an authentication method.



Login support is provided by the IT Service Desk. You may:
Because login and MFA are security services, the IT Service Desk must confirm your identity before providing assistance.