======Enroll in DUO======
===You have to enroll the two factor authentication (2FA) DUO.====
Note that in order to use the DUO app you need to have a modern OS version on your Smart Phone:
  * Android 8.0 or greater
  * IOS 12.0 or greater
If your Smart Phone is running an older OS version, please contact helpdesk@physics.leidenuniv.nl. We can install a special key set that will work with more general TOTP (non-DUO) apps lie FreeOTP or Google Authenticator.

====Standard DUO setup====
The first step in this procedure is that you register yourself in the 2FA system called DUO. For this, login with your PHYSICS account on the WEB-mail, http://webmail.physics.leidenuniv.nl

You will now be presented a setup procedure, as show and explained below. Just follow the instructions and you are all set for two factor authentication.

For the time being this will only work for the webmail in order to let you have some experience with the system.

If you have any questions, contact: Helpdesk@Physics.LeidenUniv.nl

====Setup Procedure====
If you have never enrolled in DUO you will be presented a series of windows displayed below. The first window introduces you to the setup procedure.
{{ :lion:2fa:duo_1.png?400 |}}
Click 'Start setup' to continue to the actual setup.

{{ :lion:2fa:duo_2.png?400 |}}
We will setup the most standard situation, where you have a smart phone on which you can install the DUO app. Note that if you own an old Android phone, you must be a version 8.0 or higher. If this is not the case, you will need to ask for a yubikey hardware device from the IT department.

{{ :lion:2fa:duo_3.png?400 |}}
In order for the DUO system to be able to push login authentication request sto your phone, you need to provide your mobile telephone number.

{{ :lion:2fa:duo_4.png?400 |}}
After providing the information you can continue the setup process.

{{ :lion:2fa:duo_5.png?400 |}}
DUO needs to know about your smart phone operating system since there are slight difference between those systems.

{{ :lion:2fa:duo_6.png?400 |}}
You must now go to the application store appropriate for yoyr phone's operating system and download/install the DUO app.

{{ :lion:2fa:duo_7.png?400 |}}
Once you have installed the app, you can use the + sign in the app to make it read the presented QRCode and let it learn you and our authentication keys.

{{ :lion:2fa:duo_8.png?400 |}}
Now everything is ready to continue to actually login to the application you were trying to access. In this case webmail.

{{ :lion:2fa:duo_10.png?800 |}}
You should have received an email from the DUO system explaining you successfully enrolled. It looks something like this.