Multi-Factor Authentication (MFA) Setup

MFA Setup Instructions

1. 1
   Log into CapSTAR at https://applications.capnet.ucla.edu/ using the manual login located in the middle of the screen.

   

   ⚠️  Do NOT use the yellow “UCLA Logon ID” button.
2. 2
   Click on the “Welcome” text in the upper right-hand corner of the page. A drop-down menu will appear — select “Single Sign-On Site”.

   
3. 3
   Once logged in, select the “Security” menu item, then choose “Update Profile”.

   
4. 4
   Scroll to the bottom and enter the phone number associated with a multifactor authenticator app (e.g., if you have multiple phones, use the one that has Duo Mobile installed). Complete any other required fields marked with a red asterisk (*).
   
   → Click the Update button.

   
5. 5
   After updating your phone number or other information, navigate back to “Security” → “Update Profile” to confirm the changes were saved.

   
6. 6
   If your profile information is accurate, scroll to the bottom and click the Setup Two Factor Authentication button.

   

   🚫  DO NOT SCAN THE QR CODE YET — complete steps 7–10 on your phone first.
7. 7
   Get your authenticator app ready on your phone.

   

   💡  Note: You can use any authenticator app you prefer — Duo Mobile, Google Authenticator, Microsoft Authenticator, Authy, etc. Each app has its own flow; the example below uses Duo Mobile.
8. 8
   The following steps use Duo Mobile as the example authenticator app.

   
9. 9
   On your phone, open the Duo Mobile app.
   
   → In the upper right corner, tap the blue “Add +” button.

   
10. 10
    Select “Use QR code.” Now point your phone’s camera at the QR code displayed in your computer browser.

    
11. 11
    An Account tab will appear in your Duo app labelled “Third-Party.”
    
    Rename the “Account name” field to “UCLA CapSTAR” (or any name that is easy for you to identify).

    
12. 12
    Enter the 6-digit passcode shown in your authenticator app into the “Enter Verification Code” field on the CapSTAR website.
    
    → Click Verify.

    

    🔄  These 6-digit codes refresh every 30 seconds.
13. 13
    Single-Use Recovery Codes will be generated. Save all five codes to a secure location immediately (e.g., a password manager or secure printed copy).

    
14. 14
    Re-Test your MFA setup:

    1. Log into CapSTAR — a code verification window will appear.
    2. Open your authenticator app and select the “CapSTAR” account. Note: the app will NOT display a pop-up — manually open it and tap “Show” to see the 6-digit passcode.
    3. Type the 6-digit code into the verification window.
    4. Click Log in.

    
15. 15
    If login fails:
    
    → Click the blue “Login with a Recovery Code” link and use any one of the recovery codes saved in Step 13.