17³Ô¹ÏÍø

2-Step Verification helps protect your account from unauthorized access should someone manage to obtain your password. Even if a password is cracked, guessed, or otherwise stolen, an attacker can’t sign in without access to the user’s additional verification. After logging in with your username and password, you’ll be prompted to verify your identity—the second step—using something in your possession, such as a mobile phone with the Duo Mobile App, Duo Backup Code or Duo Token.

ATTENTION: The College is currently beginning the process of migrating and requiring all users to use Duo Security for 2-Step Verification

• All alumni and students not enrolled for courses began receiving an enrollment prompt on 12/19/22
• Students enrolled in courses are being prompted in segments for Duo prompt enrollment as of 1/16/23

All users are required to enroll to protect their personal data and improve overall security by enabling 2-Step verification. Many other Colleges and Universities have implemented 2-Step verification, as have most major service providers such as Google, Facebook, and Twitter. Please consider enabling 2-Step verification not only for the College but also for your other personal accounts.

The College has partnered with Duo Security to provide all users with the best 2-Step Verification experience possible. All users will be prompted to enroll in Duo Security when they log in to delaGATE. The primary method for securing your account using Duo Security is the Duo Mobile smartphone application.

Duo has announced that as of April 2026:

iOS 16 and older will no longer be able to receive updates or to download the latest Duo Mobile version. IOS 17 is the minimum OS required to download the latest version of Duo Mobile and to receive bug fixes, maintenance, and updates.
Android 11 and older will no longer be able to receive updates or to download the latest Duo Mobile version. Android 12 is the minimum OS required to download the latest version of Duo Mobile and to receive bug fixes, maintenance, and updates.

Older Duo Versions:
This end-of-support milestone does not mean the application will stop working immediately on devices running iOS 16, Android 11, or older unsupported operating systems. However, users are encouraged to upgrade to the latest version of Duo Mobile on a supported operating system to maintain strong security and access the newest features, improvements, and updates. There is no assurance that an older version of the app will continue to function or deliver Duo authentication prompts for college systems, which will cause access and login issues until the app is updated to a supported version.

17³Ô¹ÏÍø Specific Requirements for Duo Authentication:
You must have a lock screen enabled with security provided by a passcode, pattern lock or biometric login (touch ID/face ID)
Your device must not be rooted or jailbroken.
Your mobile device cannot be using a personal VPN when receiving a Duo prompt.
The app may be downloaded from an official app store: Apple iOS – and Android –

Duo Mobile cannot access things like your contacts, photos, text messages, and emails. Duo Mobile does not perform any GPS tracking and does not require access to GPS. Please for more information:

A physical hardware token is available for sale at all of the College’s Bookstore locations and via the College’s

Students with financial insecurities who are in need of a Duo Token (D-100) should complete a , which the Student Resource Center will evaluate.

The Duo Token (D-100) costs $20 and has a lifespan of approx. two years. The Battery cannot be replaced.
The Duo Token cannot be transferred to another user once registered with 17³Ô¹ÏÍø’s system.
The Duo Token is non-returnable and non-refundable
Duo Tokens purchased at the College’s bookstore will only work with the 17³Ô¹ÏÍø Duo System.

. Duo Tokens are immediately activated once registered in the system.

Currently, the College does not support YubiKey’s Duo Security System for Students or Adjunct Faculty. All users are able to register a YubiKey as a Duo Security Key; however, it will not work when attempting to log in to the College’s computers, which use the Duo Windows Client. OIT does not provide support for any YubiKey unless it was provided to an employee by the College

Many College students and staff are already set up for 2-Step Verification and use Duo Mobile to generate an authentication code. The app is currently operating in ‘Third-Party’ mode, which does not provide the required level of protection. Please follow the enrollment steps to set up your device with Duo Mobile. Once set up, you can delete the ‘Third-Party’ token from the Duo Mobile app for delaGATE.

Watch the video below for step-by-step instructions on how to enroll your account in 2-Step Verification.
You can enlarge this video by clicking the box icon in the lower right-hand corner once the video starts.
You can enable HD by clicking the setting gear, clicking quality, and change to 1080

How to Enroll in Duo Security when prompted during delaGATE Login:

How to Enroll in Duo Security using the delaGATE Account Management Page (Not Prompted at Login):

1. Click Deny and then Yes, as it was a suspicious login.
2. Contact the IT Support Center and let us know that you received a fraudulent push.
3. We strongly advise that you change your password, as it is possible that it has been compromised.

Please contact the IT Support Center at 610-359-5211

All applications that use delaGATE for authentication. 2-Step Verification is also required to login into Employee computer systems and for all remote access by employees.

No. There is no option to disable it.

Please note that OIT cannot disable 2-Step Verification on any account. If users cannot access the account, they must follow the 2-Step Lockout procedure to gain access to the account.

Your account will lock after too many failed attempts to authenticate. The lock-out will automatically be removed after a period of time.

Users with 2-Step verification should always have a backup mode configured. All users must print a list of one-time-use verification codes during the enrollment process, as outlined in the video above. Users can also configure additional approved verification options, such as a passkey or D100 token, to use if the mobile app is unavailable.

If you do not have access to your backup verification codes or other methods, you should contact the OIT Support center during regular operating hours. (Monday – Thursday, 8 a.m. – 6:30 p.m. EST, Friday, 8am to 5:00 pm EST. Saturday – Call back only.)
You may come in person to the IT Support Center at Marple with a valid Government Issued Photo ID or Passport or remotely by connecting to a Zoom video session, with Video enabled with a valid Government Issued Photo ID or Passport.
You will also be asked a series of authentication questions.

The Duo Mobile application uses a very small amount of data to send push notifications. If you received 500 push notifications per month, that would equate to 1 MB of data usage. Less than loading one web page to your mobile device. You may disable push notifications if you do not want to use any data; however, you will have to manually enter a code from the app as a passcode to log in. Data fees may be incurred during the installation of the application and during any updates if auto-update is enabled. We recommend connecting your device to the College wifi system when on campus.

The Duo Mobile app can generate passcodes with no Internet or data to generate codes. We recommend connecting your device to the College wifi system when on campus to ensure the best user experience.

If you are migrating between Apple and Android, you should log in prior to disposing of your old phone and add your new device. If migrating between similar devices and you have cloud backups enabled, you can use Instant Restore. Please see the videos below:

Please review this video if you’re migrating from iPhone to iPhone:

Migrating from Android Phone to Android Phone:

There are two reasons you could be getting this message. To better secure your accounts, users may not connect from TOR endpoints or networks used to anonymize or proxy traffic. In many cases, using a VPN to obscure your location will cause an ‘Access Denied’ message. Disable your VPN and try again.

In order to comply with U.S. regulations, Duo blocks authentications from users whose IP address originates in a country or region subject to economic and trade sanctions enforced by the.

OFAC restrictions relevant to Duo currently apply to the following countries or regions:

• Cuba (CU)
• North Korea (KP)
• Iran (IR)
• Sudan (SD)
• Syria (SY)
• Crimea region (43)
• Donetsk region (14)
• Luhansk region (09)
• Sevastopol region (40)