Access is not allowed because you are not enrolled in Duo. When using Citrix to request MIMPAM Role

A knowledge base article about Access is not allowed because you are not enrolled in Duo. When using Citrix to request MIMPAM Role provided by the UC Berkeley IT Service Hub - Knowledge Portal

Error message: Access is not allowed because you are not enrolled in Duo.

Overview

This error can occur for multiple reasons when authenticating to Citrix or requesting a MIMPAM role. Review the options below to identify and resolve the issue.

Common Reasons and Solutions

1. Incorrect Username Format (Most Common)

Reason: When authenticating to Citrix, both a domain and username are entered in the Username field (e.g., azul\.<your-calnetid>).

Solution: Only enter your PRIV account in this field. This is formatted as a dot followed by your ID.
Example: Use .oski instead of azul\.oski.

2. Missing Duo Alias

Reason: Your PRIV account has not been added as an alias to your Duo account.

Solution: Submit a support ticket to the Windows Team by emailing win-ticket@berkeley.edu. In your request, please include the following: