1. Ensure user has downloaded Global Protect VPN and DUO Mobile on their cell smartphone
2. Navigate to DUO Admin Page and verify DUO account is present
3a. If DUO account is not present, check Active Directory and Confirm user is a member of the "Duo Users" group
3b. **If they are not already in the Duo Users, they will need to be added and wait for the next AD sync (approximately 30 minute intervals)**
3c. After the AD sync, go back into Duo Admin page to: Users < Directory Sync < OrthoIndy < Sync Now
4. Search for the username in the search bar in Duo and click on the user
5. Scroll down to "Phones" and click "add Phone"
6. Enter in their cell phone number
7. Click on "Activate Duo Mobile"
8. Generate activation code and send to their cell phone as link.
9. Have them click on the link and it should prompt to open in Duo Mobile
10. If they are prompted to name the account, they leave it as the default "orthoindy" name.
**They will likely mention a passcode or 6 digit number. This is not a feature that we use for authentication so let them know they can ignore those numbers**
11. Click on the the username from the current Duo page to get to the user's main page.
12. Click on "Send Duo Push" they should receive a popup on their phone and should click allow
13. If you see Duo Push approved on your end, they are good to go with DUO
14. Next have them navigate to Global Protect app and enter in vpn.orthoindy.com as server address
15. Have them sign in with SSO credentials (same username and password they sign into OrthoIndy computers with
16. They will then need to approve the Duo Push
17. If VPN says connected, they can proceed to next step
18. Open a web browser like Safari or Chrome and navigate to 10.180.31.25
19. That should open BMS