Duo Authentication Methods

Duo Push means that when you log onto Cardinal Station, Duo sends ("pushes") an automatic notification via the free Duo Mobile app installed on your registered smart phone. You simply tap the green "Approve" button to complete the login.

If you made the recommended choice at enrollment to use a smartphone with option "Automatically send this device a Duo Push,” you receive a notification alert on your smartphone automatically when you attempt to login. Press the green "Approve" button and you are in! For a more detailed description, please visit Duo Push - Login Experience

Note: Please allow Duo to send “push notifications” on your device so that you will see the Approve notification- this can be set the first time you use Duo, or later within your mobile device settings.

Step-by-step:

1. Navigate to the needed Cardinal Station system.

2. Enter your Username.

3. Enter your Password.

4. Click the "Sign In" button.

5. On your mobile device, approve the Duo Push notification by clicking "Approve."

Duo Push is recommended because, as the vendor notes, it is "a more secure method that can protect against man-in-the-middle (MITM) attacks. Duo Push is resilient against credential-stealing attacks, including bypasses of one-time passwords."

If you choose to use a smartphone with the option "Ask me to choose an authentication method"  at enrollment, then you must append the phrase ",push" to your password to receive the Duo Push notification on your mobile device. Tap the green "Approve" button on the phone, and you are in!

Step-by-step:

1. Navigate to the needed Cardinal Station system.

2. Enter your Username.

3. Enter your password 

   • Cardinal Financials - Enter your password followed by “,push”

There must be a comma (,) between your password and the word phone1 (for example, if your password is "Shibboleth" you would enter "Shibboleth,push" in the password field)

3. • VPN 

     • Password: Enter your password

     • Secondary Password: “push”

4. Click the "Sign In" button.

5. On your mobile device, approve the Duo Push notification by clicking "Approve."

If you chose Mobile phone the Landline with the option "Ask me to choose an authentication method" at enrollment, you need to append the phrase ",phone1" to your password when logging onto Cardinal Financials. You will receive a phone call at your enrolled number. Follow the instructions when called. Please visit Login Experience Using the Duo Call Option for a more detailed description.

Step-by-step:

1. Navigate to the needed Cardinal Station system.

2. Enter your Username.

3. Enter your password 

   • Cardinal Financials - Enter your password followed by “,phone1”

There must be a comma (,) between your password and the word phone1 (for example, if your password is "Shibboleth" you would enter "Shibboleth,phone1" in the password field)

3. • VPN 

     • Password: Enter your password

     • Secondary Password: “phone1”

4. Click the “Sign In” button.

5. The enrolled phone will ring.

6. Answer the call and follow the spoken instructions.

If you choose a mobile phone of any type (smartphone or feature phone), you can request an SMS passcode. Append the phrase ",sms" to your password. The Cardinal Financials login will error, and you will receive a text message with a code on your mobile device. Then you log on a second time, this time appending the code to your password. 

The first login attempt is a request to send the SMS code to your mobile device, the second time you will be able to successfully log in as you will have the needed code.

Step-by-step:

1. Navigate to the needed Cardinal Station system.

2. Enter your Username.

3. Enter your password 

   • Cardinal Financials - Enter your password followed by “,sms”

There must be a comma (,) between your password and the word phone1 (for example, if your password is "Shibboleth" you would enter "Shibboleth,sms" in the password field)

3. • VPN 

     • Password: Enter your password

     • Secondary Password: “sms”

4. Click the "Sign In" button.

   • NOTE: The login will fail!

5. On your mobile device, check your text messages for the SMS code. 

   • NOTE: The code can be used only once, and expires after 24 hours.

6. Back on the main logon page, log in again using the SMS code you received on your mobile device:

7. Enter your Username.

8. Enter your password

   • Cardinal Financials - Enter your password followed by ",<code from SMS>"

You need the comma (,) between your password and the code you received on your mobile device - for example, if your password is "Shibboleth" and the code you received was "135765" you would enter "Shibboleth,135765" in the password field.

8. • VPN 

     • Password: Enter your password

     • Secondary Password: <code from SMS>

9. Click the "Sign In" button.

This method is less convenient than Duo Push because you must log on twice.