Download the latest version of Microsoft Remote Desktop from the App Store; it should be at least v10.5: https://apps.apple.com/us/app/microsoft-remote-desktop/id1295203466?mt=12

Follow these instructions to set up Microsoft Remote Desktop on your Mac:

https://www.dropbox.com/s/n6l3g5ebijw8s48/SFO%20-%20RPD%20MAC%20TUTORIAL.pptx?dl=0

Here is the format for your information. You will need to know your PC Name:

Gateway name: azrds.sfopera.com

User account: sfopera\erubio

Username: erubio@sfopera.com

PC Name: IS10-6.sfopera.com

The required steps to enable Multi Factor Authentication/ Remote Desktop Protocol are:

  1. Installing and verifying the Microsoft Authenticator app on your cell phone;
  2. Configuring your computer not to go to sleep;
  3. Creating and configuring Microsoft Remote Desktop.

Installation/Set Up Process:

  1. Install and Verify Microsoft Authenticator app
    • Complete the Outlook template (sent upon request for Remote Access) with your phone and computer information and send to HelpDesk@sfopera.com.
    • Once the HelpDesk receives this information, you will receive a text from Duo Security with two links:
      1. to install the app, and
      2. to verify the installation.
        • Please note: These links are only active for 24 hours, so don’t email the HelpDesk unless you’re sure you have time to complete the process in that time frame.
      3. Please refer to the step-by-step Duo Installation Instructions shown below for Apple and Android devices.
  2. Configure your SF Opera computer not to go to sleep
    • Search Windows (“Type here to search”) for Power & Sleep Settings, click Open
    • Under Sleep, use the dropdown menu to select Never
    • Close the window by clicking X in the upper right-hand corner
  3. Install Remote Desktop on your home Mac computer
    • If your computer is a Mac, you must be running macOS 10.12 or later, and have a 64-bit processor (see http://support.apple.com/kb/ht1633)
    • If your Mac is compliant, go to the Apple Store and download and install Microsoft Remote Desktop Version 10.3.9 ((https://apps.apple.com/us/app/microsoft-remote-desktop/id1295203466?mt=12)
    • Create a Gateway Server entry by clicking on the Gear and selecting Preferences from the drop-down menu in Microsoft Remote Desktop:
    • Select User Accounts and click the “+” at the bottom of the left-side white box to add a new user
    • A new dialogue box will open. Enter the following details:
      1. User name: sfopera.net\[Your user name]
      2. Password: [Your domain password]
      3. Once complete, click Add
    • Select the Gateways tab and click the “+” and then enter the following information in the respective fields:
      1. Gateway name: remote.sfopera.com
      2. Select your User account from the drop-down menu
    • Once complete, click Add
    • Close the Preferences window 
    • Next, click the “+” and select Add A PC from the drop-down menu
    • Enter the following information in the respective fields:
      1. PC name: [Your computer name].sfopera.net
      2. User account: sfopera.net\[Your user name]
      3. Friendly name: My SFO Desktop
      4. Gateway: remote.sfopera.com
    • Once complete click Add, close this window
  4. To start your Remote Desktop session, double click your new PC “My SFO Desktop”
    • Approve the connection via Duo on your phone and you will be connected to your Desktop!
    • If you receive a ‘Verify Certificate’ window, click “Continue”

 

Installing Duo Mobile on iPhone

Duo Push

Duo Push is the easiest and quickest way of authenticating. You'll get a login request sent to your phone — just press Approve to authenticate.

If you get a login request that you weren't expecting, press Deny to reject the request. You’ll be given the ability to report it as fraudulent, or you can tap It was a mistake to deny the request without reporting it.

Duo Push Notifications

You can respond to Duo Push requests from the iOS lock screen or banner notification. On Apple devices that support 3D Touch, performing a firm long-press on the Duo Mobile notification from the lock screen reveals the "Approve" or "Deny" actions.

On devices that do not feature 3D Touch, swipe left on the lock screen Duo Mobile notification to reveal additional actions.

When your screen is unlocked, long-press or swipe down on the Duo Mobile banner notification received to reveal the authentication actions.

 

Installing Duo Mobile on Android

Duo Push

Duo Push is the easiest and quickest way of authenticating. You'll get a login request sent right to your phone. When the Duo Push notification shows up on your screen, tap where indicated to view the available actions: Approve or Deny.

 

You can slide down your notifications to see more information about the login request before selecting an action, like the username, timestamp, and location information (if available). Simply tap Approve in either type of notification to finish logging in to the Duo-protected application.

Tapping on the push request notification itself (instead of tapping the notification actions) takes you to the full Duo Push screen in Duo Mobile.

 

If you get a login request that you weren't expecting, tap Deny on the notification or the full Push screen to reject the request. If you don't recognize the authentication attempt as your own, tapping It seemed fraudulent rejects the login attempt and also notifies your Duo administrator about the suspicious request.

If you just want to cancel a login request you made you can tap It was a mistake to deny the request without reporting it.