YubiKey and Duo Two-Factor Authentication (2FA)

One option for using Duo Two-Factor Authentication (2FA) is the YubiKey security key. 

On this page

Initial Enrollment in Duo 2FA With a YubiKey

  1. Insert your YubiKey.
    Your YubiKey should be recognised automatically.

  2. Go to the Odin Account Manager at oam.pdx.edu.

  3. Select the Sign In link.
    You will be redirected to the Username form field in the Single Sign-On window.

  4. Type in your Odin username.

  5. Tab forward to the Password form field.

  6. Type in your Odin password.

  7. Press Enter to sign in.
    You will be redirected to the Duo 2FA prompt.

  8. Select “Other Options” from the available authentication options.

  9. Select the Security Key button.

  10. Select and activate the Continue button.
    You will be asked to "Enroll Your Security Key."

  11. Select and activate the Continue button.

  12. To enroll, touch the depressed circle (on the large YubiKey) with the pad of your finger or pinch the raised tabs (on either side of the small YubiKey) with two fingers.
    You will be redirected to "My Settings & Devices." 

  13. Select and activate the Continue to Login button.

  14. To sign in, select “Yubikey” from the DUO Device tab and select “Use Security Key” to receive a prompt from your browser, touch the depressed circle (on the large YubiKey) with the pad of your finger or pinch the raised tabs (on either side of the small YubiKey) with two fingers.

Optional: Select the Remember me for 30 days checkbox to avoid using Duo 2FA on your current device for 30 days.

Authenticate With YubiKey

  1. In the Single Sign-On window, type your Odin username in the username form field.

  2. Type your Odin password in the password form field.

  3. To sign in, select “Yubikey” from the DUO Device tab and select “Use Security Key” to receive a prompt from your browser, touch the depressed circle (on the large YubiKey) with the pad of your finger or pinch the raised tabs (on either side of the small YubiKey) with two fingers.

Optional: Select Yes when prompted ‘Is this your device?’ to avoid using Duo 2FA on your current device for 30 days.