Windows Aegis MFA Setup and Troubleshooting

Resources surrounding the multi-factor authentication (MFA) solution included in Aegis.

Interactive setup instructions

Before setting up Duo on your device, please make sure you have a stable internet connection, your device's clock is synced and displaying the correct local time, you know your Aegis Microsoft account password (PIN logins will no longer work once Duo is installed).

If any of the steps below fail, attempt to retry by clicking the button in the Duo setup window. If that does not fix the issue, open a ticket with Atomus support here.

1. If the MFA feature is enabled for your company, Aegis will automatically open a new window that will guide you through the process of setting up MFA on your device. Click "Restart app" on the bottom right corner if you do not see an MFA section.
    
   1. If you do not complete the setup, the MFA section in the Aegis application will show "Error" until you click the refresh button and complete the setup.
      
      

1. Make sure you have a smartphone nearby, and when ready click the "Get started" button.
2. If you have not enrolled your device in Duo already, the Duo enrollment process will load to guide you through adding your phone number to Duo and installing the Duo Mobile App on your device.
    
   1. If you have already installed Duo in the past, when asked to scan the QR code, you can click the "Add" button in the Duo app and then choose "Use QR" code in the list of options.
      

1. Once you have successfully enrolled, Aegis will verify your enrollment status. When ready, click "Start verification" and after a few seconds you should see a notification on your mobile phone. Allow the authorization request and click "Continue" in the setup window to proceed.
2. Wait for the setup to complete. If successful, you may close the setup window. If an error occurred, try clicking "Try again".

Setup offline access

After going through the interactive setup, it is important to setup offline access. A guide will automatically open in your browser explaining the steps to set it up. 

NOTE: On Windows your Pin, Face ID, or Touch ID will no longer work to login. You must know your Office365 password and use that to login. If you are having any difficulties logging in, try your credentials in "Other User"

1. Read through the steps to get offline access setup in your browser, and when ready, navigate back to the Aegis MFA setup window and check the box acknowledging you have read and understand the setup instructions.
2. When ready, sign out of your account.
3. Enter the password for your Aegis Microsoft account (Windows), or your local device password (MacOS).
   
   
4. A duo prompt should appear, and you should receive a notification on your mobile device. Allow the authentication request.
5. You should now see a page prompting you to activate offline logins. Click "Activate now".
   
6. Once again, go into the Duo Mobile App and tap "Add", then use QR code. Scan the QR code displayed and optionally add a name in the app.
   
   Click "Enter Offline Code" and enter the 6-digit code displayed in the Duo Mobile App for the profile you just added. Click proceed and the setup is complete.

---------------------------------------------------------------------------------------------------------------------------------

FAQs

When trying to sign back into my device, my credentials don't work.

Try using "Other User" to sign in with your credentials. It will then prompt you to setup offline access.