Upcoming Changes to Duo

Duo verified push notifications

Starting at 12 p.m. on Wednesday, September 25, 2024, logins that use the Duo Universal Prompt will use Duo verified push notifications. This does not impact other methods of Duo two-factor authentication.

Duo will display a three-digit verification code that you enter on your mobile device.

Prompt for Duo Verified Push Notification with 3-digit verification code circled

On your mobile device, the Duo notification will ask for the three-digit code. Enter the three-digit code and tap Verify to authenticate.

Duo Mobile App Verified Duo Push screen - verification code circled

The additional step is designed to better secure the authentication process and help prevent unauthorized two-factor approvals.

  • While this adds an extra step, the number of prompts you receive will not increase.
  • If using “This is my device/Remember me,” the new verified push requirement will appear when you are next prompted to complete a Duo push.
  • During login, Duo Verified Push notifications will require users to enter a three-digit code before it expires. If this process presents a barrier, other methods of Duo authentication are available and unaffected.

Advantages include:

  • Significantly more difficult for a threat actor to trick a legitimate user.
  • Protection against multi-factor authorization fatigue.

Entering the Verification Code on Apple Watches

There are several options that vary by device and OS version:

  • Type: If you are presented with a full QWERTY keyboard, note that it may be challenging to input the code.
  • Sketch: Use your finger to sketch each digit of the code in the designated area below the Reply field. You may need to tap "scribble" to have the option to sketch the code.
  • Dictate: The microphone icon can be tapped to speak the code aloud for it to be transcribed.

Use the current version of Duo Mobile

To ensure the enhancements described above will work as designed, users should update their version of the Duo Mobile app to the most current version (if they have not done so already). The most recent version of Duo Mobile is available from the app stores for devices running Android 11 or later and iOS 15 or later.

Additional security enhancement

Also on Wednesday, September 25, 2024, users who log into Microsoft 365 and Teams with their U-M account will be required to complete two-factor authentication via Cisco Duo.

Microsoft 365 Verify Your Identity Prompt - Approve with Cisco Duo circled

Questions?

If you have any questions, please submit a ticket to the ITS-IAMTwoFactor group via the ITS Service Center.