How to authenticate to VPN when a Duo "push" is not available

Text Message

If Duo Push is not an option, you must add a comma (",") to the end of your password and append the letters “sms” (without quotes).

The SMS method is a two-step process. The first step is requesting a passcode. The second step is using that passcode.

For example, if you wanted to use SMS to authenticate instead of Duo Push, you would enter your username and password into AnyConnect as usual, however, immediately after your password, enter “,sms”. (a comma followed by the letters sms). This first login attempt will fail and is only used to tell Duo to send you a text message.

In the following example, the username is bob and the password is Password1. To tell Duo you want to log in with SMS, type:

Username: bob

Password: Password1,sms

Remember, The authentication attempt will fail. This tells Duo to send you a text message. Now, check your phone for a new passcode.

Once you receive the passcode, go back to AnyConnect and log in again with your username and password, only this time append the new code to the end of your password.

In the following example, the username is bob and the password is Password1. If the code you received was “123456”, type:

Username: bob

Password: Password1,123456

Accept the login terms, and you are now connected.

Hardware Token/Fob

When logging into the VPN with a hardware token or fob you do not need to "request" a code as above. It will automatically be generated on your fob. 

In the following example, the username is bob and the password is Password1. If the code currently displayed on your fob is "013579", type:

Username: bob

Password: Password1,013579

Accept the login terms, and you are now connected.