...
Because of persistent threats leveraged against higher ed academic institutions, CNF and Cornell require a VPN connection to access many on-campus services. Cornell uses two differing VPN clients... Cisco Anyconnect for those with a Cornell NetID; FortiClient for those with a Cornell GuestID.
...
For Two-Step login, first select the Two-Step_Login VPN Group. And then in the DUO Passcode (push/SMS/Phone) or second password box, enter the method you use to complete Two-Step Login:
...