Multi-Factor Authentication on VPN – Diné Development Corporation

**MFA for the SSL VPN is enabled via DUO.**
	You will receive a notification from DUO when you connect to the DDC SSL VPN to authenticate your connection via your default authentication method (push notification via app / text message / phone call / etc). This will happen at approximately 45% of the connection state. Please be advised - you will not receive any notifications in FortiClient (our VPN Service) that a MFA attempt was made. You may need to open the DUO app on your phone to accept the push notification if you are stuck at 45% and did not receive a push.

	Example of a push notification from DUO.

	Example of approval option within DUO.

Advanced Functions
You can override the default authentication option you originally selected by appending the authentication method of your choice to your password with a comma as shown here:

Command	Description	Example input
push	To perform a DUO Push authentication. You can use DUO Push if you've installed and activated DUO Mobile on your device	p@ssword1234,push
phone	To perform a phone callback authentication	p@ssword1234,phone
sms	To send a new batch of SMS passcodes. Your authentication attempt will be denied. You can then authenticate with one of the newly-delivered passcodes.	p@ssword1234,sms
A numeric passcode	To log in using a passcode ... either generated with DUO Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. For example, if you wanted to use a passcode to authenticate instead of DUO Push or a phone call, you would enter: username: barry.linkin password: p@ssword1234,123456