Information Technology Services IT Security Office
Note: Two-factor authentication (2FA) is mandatory for Mason employees
to access the Cisco AnyConnect VPN

Enrollment Instructions

  U.S. Phone Number  |  Non U.S. Phone Number


INITIAL ENROLLMENT (U.S. Phone Number)

The steps below will walk you through enrolling in 2FA. Mason requires that during your initial enrollment the phone number of your device must be in PatriotWeb. We recommend using a smartphone for the best experience.

  1. Login on Patriot Web to verify the phone number of your device is listed. Update Patriot Web if the phone number isn't listed.
  2. On your smartphone go to the App Store and download the Duo Mobile app by Duo Security if you have not already. The app is required to confirm your identity when connecting to Cisco AnyConnect VPN.
  3. On a web browser go to 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  4. 1
  5. Login with you Mason NetID and Patriot Pass Password.
  6. Begin the enrollment process by selecting the phone number of your device and click Next. You must be able to answer a call to complete enrollment.
  7. Note: If the phone number is not listed please update your phone numbers in Patriot Web.
  8. 3
  9. Confirm the phone number you selected, click OK.
  10. 4
  11. Click the green Call Me button.
  12. 5
  13. The phone number you selected previously will ring. (Note: If you miss the call it will attempt to call you up to 6 times)
  14. When you answer the call it will ask you to acknowledge the call. Press 1 when prompted.
  15. Select your phone type from the list. i.e. If you are enrolling an iPhone select iPhone and for an Android select Android. Then click Enroll Device.
  16. 6
  17. Are you enrolling a smartphone or mobile phone/landline?
  • Smartphone
    • Go to the App Store on your device and download/install the Duo Mobile app by Duo Security if you have not already.
    • Open the Duo Mobile App on your smartphone and click + or Add Account. Note: When configuring the app, allowing or enabling notifications improves your ability to authenticate using Duo Mobile.
    • Scan the activation QR code to activate your device.
    • Click Continue.
  • Mobile/Landline Phone
    • Continue to Step 12
  1. When prompted enter an alternate email address and click Save and Continue. The alternate email address cannot be your Mason email.
  2. Note: This alternate email address is used if you need an Emergency Bypass Code, if you do not enter an alternate email address it will make the process harder to get back into 2FA.
  1. 7
  2. Your initial enrollment is complete. The Enrollment Confirmation page will open. To enroll additional devices or manage other account information click OK. For additional instructions see 2FA Management Options.
  3. Click Logout to exit the Account Management application.

INITIAL ENROLLMENT (Non U.S. Phone Number)

The steps below will walk you through enrolling in 2FA if you are working internationally. Mason requires that during your initial enrollment the phone number of your device must be in Patriot Web. You must use a device (smartphone or tablet) which is able to use the Duo Mobile app.

  1. Login on Patriot Web to verify the phone number of your device is listed. Update Patriot Web if the phone number isn't listed or is formatted incorrectly. NOTE: Do not use punctuation (dashes, periods, spaces or parenthesis) or prefixes (such as 011) when updating your phone number.
  2. On your smartphone go to the App Store and download the Duo Mobile app by Duo Security if you have not already. The app is required to confirm your identity when connecting to Cisco AnyConnect VPN.
  3. On a web browser go to 2fa.gmu.edu. Click 2FA Account Login on the bottom right.

  4. 1
  5. Login with your Mason NetID and Patriot Pass Password.

  6. Begin the enrollment process by selecting your phone number and click Next . You must be able to answer a call to complete enrollment.
  7. 1

    NOTE: If the phone number is not listed please update your phone numbers in Patriot Web. Do not use punctuation (dashes, periods, spaces or parentheses) or prefixes (such as 011) when updating your phone number.
  8. Confirm the phone number you selected and click OK.
  9. International 6
  10. Enroll your Duo Mobile compatible device (e.g., smartphone or tablet) in Mason's two-factor authentication system. You need to include the type of device and a device name. Also include an alternate (non-GMU) email address. Click the Save and Call Me button.
  11. 1
  12. Answer the phone and press 1 when prompted. Open the Duo Mobile App on your device and scan the QR code, which activates the app. Click Continue.
    International No 8
  13. This is the next screen you will see, which verifies you have completed the initial enrollment. slide 9 updated


If you need assistance related to 2FA, contact the ITS Support Center.