Skip to main content

Log in with Append Mode or Second Password Authentication for Two-Step Login

How to use append mode or a second password to authenticate with Two-Step Login for services that don't support CUWebLogin

This article applies to: Two-Step Login


Use Append Mode Authentication

Some campus IT services such as Desktop Everywhere using the VMware Horizon View client, don't support a web interface to specify how you would like to complete the second step to authenticate and log in. Use "append mode authentication" for these services, a text-based method of authenticating and logging in.

If you enter just your NetID and password, Two-Step Login will check the enrolled devices in your account in the following order:

  1. The first device with the Duo Mobile app activated.  Duo will send a Push to that device.
  2. The first phone number listed on your account.  Duo will call that phone number.

To manually select a different device or enter a passcode, use append mode authentication:

  • To receive a push on you Duo Mobile App, type: your_NetID_password,push
  • To receive a phone callback, type: your_NetID_password,phone 
  • To enter a passcode, type: your_NetID_password,your_passcode 
  • To get a new batch of SMS passcodes, type: your_NetID_password,sms
    Your login attempt will fail — log in again with one of your new passcodes.

You can also add a number to the end of each authentication method to select which device you want to use. For example, push2 will send a push to your second device with the Duo Mobile app installed, phone3 will call your third phone, etc.

You can view the order of your enrolled devices and the device numbers needed for append mode in your My Two-Step Login Devices window. For more information, follow the instructions in Duo Security's Guide to Two-Factor Authentication.

Use a Second Password Field

Some services don't support a web interface for authentication but do include a second password field to enter the required information to complete the second step to authenticate and log in.

In the second password field you can enter a passcode or ask for a Duo Push (push) or a callback to your cell phone or landline (phone). The device numbers you will need to specify the device you want to use for the second step of logging in are listed in your My Two-Step Login Devices window.

Duo Security provides documentation on how to use the second password field for some products, like the Cisco AnyConnect client used with Cornell's VPN service. For more information, see Duo's Guide to Two-Factor Authentication and the list of products in the Authenticating section (in the column on the left).

Was this page helpful?

Your feedback helps improve the site.

Comments?