Mark your calendars, WUIT announced that there will be changes coming to DUO 2FA on November 20th in attempts to battle nefarious IT attacks.
This change will impact all systems and services which currently require DUO Two-Factor Authentication (2FA).
How is DUO 2FA changing on November 20?
- DUO Push will require entering a unique three-digit number on your mobile device, instead of selecting the approve button.
- Accessing VPN will require the same three-digit DUO Push experience.
- The Call Me feature will be phased out as an option for DUO 2FA.
Please visit DUO 2FA Changes for details.
Why is DUO 2FA changing?
If your WUSTL Key username and password were to become compromised, it is easy to accidentally approve a login attempt which you did not initiate. Requiring the three-digit verification number will help prevent this threat.
Call Me will Require an Approved Exception Request
If for one reason or another you cannot use the standard DUO Push method (3 digit code), you can request exception to used the Call Me feature.
- The Call Me feature can be made available up on an approved exception request.
- Exception Requests require review and approval by the Office of Information Security.
- Please visit the Can I Still Use Call Me or Passcode Authentication page for instructions.
