Known Issue: Using Duo with Only Biometric-enabled Devices
While Duo recommends enrolling Touch ID, Face ID, Windows Hello, and Android Biometric devices when setting up Duo, using them as the primary device is not recommended at this time.
These options are often device or even browser-specific with only specific browser versions being supported. If a user tries accessing their account from another device or browser, including Respondus Lockdown Browser, they will be unable to authenticate with Duo and told to contact their IT Help Desk for a bypass code. If a user no longer has access to their existing enrolled device/browser to add or manage devices and/or hasn’t enrolled a backup device (as recommended), they will be locked out of their account until they can contact the Technology Support Center by phone for a bypass code.
DoIT’s recommended option for authentication is via the Duo Mobile app, available on most iOS and Android phones and tablets. The Duo Mobile app sends a push notification to the user’s device automatically to authenticate. The Duo Mobile app can also be used to manually generate passcodes without wireless or cell coverage as a backup authentication method.