A Duo push notification is a second identity check before access is granted to certain Michigan Medicine resources. It asks an individual to confirm they want to access a specific application at that time.

In August 2024, the Duo push notification changed to require a numeric code instead of a button push. This change does not impact other Duo approval methods, which include using a hardware token, a security key (Yubikey), or using a bypass code. Learn more about Michigan Medicine's Duo authentication options. 

The change to verified push and the removal of the 'text me' and 'call me' authentication options were enacted due to active security threats. The current Duo authentication options make it significantly more difficult for a threat actor to bypass or trick a legitimate user into approving a notification they did not request. Verified push is also a requirement on U-M campus.

Notes:

• The Vplaces and VPN Duo experience will NOT change.
• This will not impact the EPCS Duo process. EPCS Providers still need to enroll their devices in the Duo EPCS system.

If you receive a Duo prompt that you did not initiate, it is important to deny the request immediately by pushing "I'm not logging in" in the Duo Mobile app. This action helps protect your account from unauthorized access. Next, please change your password right away and report the incident to the Michigan Medicine Service Desk at 734-936-8000. Your prompt attention to these steps is crucial for maintaining the security of your account.  

Enter your uniqname and password on the Weblogin screen when prompted by an application. 

A Duo Mobile screen prompt will appear, asking that you type the 3-digit code shown on the screen into your phone. 

• Looking at your mobile phone, a Duo notification will pop up with the following screen.
• Input the three-digit code from your computer into your mobile phone.
• Press Verify.

Once successful, a green Approved screen will appear on your phone.