Multi-factor Authentication for Cisco AnyConnect

Using Cisco AnyConnect and Duo Security

If you use the Cisco AnyConnect client to connect to the LMU VPN instead of the web client at, here's how to connect to the VPN using Duo Security.

You will be presented with a login prompt similar to the screenshots below, and you'll have a few options.

Use the "Duo Authentication" (Mac OS) or "Second Password" (Windows) field to tell Duo how you want to authenticate. Here's how:

push Push a login request to your phone (if you have Duo Mobile installed and activated on your iPhone, Android, Windows Phone, or BlackBerry device). Just review the request and tap "Approve" to log in.
phone Authenticate via phone callback.
sms Get a new batch of SMS passcodes.
Your login attempt will fail. Login again with one of your new passcodes.

You can also add a number to the end of these factor names if you have more than one device registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.

Another option is to open your DUO Mobile app and click on the key icon to retrieve the 6-digit code, then enter it in the Duo Authentication (Mac OS) or Second Password (Windows) fields. This simulates a multi-factor hardware token.