cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
420
Views
2
Helpful
3
Replies

User asked to Enter bypass code

shammons
Level 1
Level 1

I am trying to get a better understanding of why a user would be asked to Enter a bypass code when they have setup Duo 2fa? Is it a possibility that their authentication device has no connectivity with Duo?  

1 Accepted Solution

Accepted Solutions

ccieexpert
Spotlight
Spotlight

this link explains it well.. it is used when the mobile device is not working or something is wrong with the duo app..

https://help.duo.com/s/article/6327?language=en_US

View solution in original post

3 Replies 3

ccieexpert
Spotlight
Spotlight

this link explains it well.. it is used when the mobile device is not working or something is wrong with the duo app..

https://help.duo.com/s/article/6327?language=en_US

That would make sense with the location being in a bad service area. 

DuoKristina
Cisco Employee
Cisco Employee

Hi there!

>That would make sense with the location being in a bad service area. 

The Duo prompt doesn't dynamically change to not offer Duo Push authentication and only offer bypass codes based on the network connectivity of the mobile phone. We do not test for device reachability prior to displaying available options or the user selecting to use push request. This does not explain it.

Some possible explanations are:

- the user does have a iOS or Android device enrolled in Duo, attached to their username, and with Duo Mobile activated for 2FA. But, the effective authentication methods policy for the user's login attempt does not permit use of Duo Push authentication, therefore the Duo UI can only offer bypass code authentication as a fallback.

- The username authenticating to Duo does not have any valid devices attached for authentication and therefore the Duo UI can only offer bypass code as a fallback.

Duo, not DUO.
Quick Links