The offline enrollment process involves the following steps:
For offline access to work, the user must first have an active internet connection. The user logs into the Duo enrollment portal and selects the option to activate offline access. During this step, Duo provisions a secret key to the Duo Mobile app on the user’s smartphone. This "pairs" the phone with the user’s account specifically for offline generation. duo offline enrollment
Let’s tear down the mechanism of how offline enrollment actually works, why it is cryptographically tricky, and how to audit it properly. The offline enrollment process involves the following steps: