This spring, ITS Identity and Access Management (IAM) will take another step toward improving the security of Duo two-factor authentication at U-M. Phone Call and SMS (text message) will no longer be available as authentication options for people who are enrolling in Duo for the first time, or for current users who add a device with a new phone number. If you are traveling to a location where data connection is unavailable, the Duo mobile app can provide a Mobile Passcode.
The change is designed to make the university’s authentication process significantly more difficult for threat actors to impersonate or “phish” legitimate users. Michigan Medicine transitioned away from Phone Call and SMS methods in September 2024.
People who use only Phone Call or SMS for authentication will not be affected by this change at this time, but are strongly encouraged to transition to the preferred and more secure Duo Verified Push authentication method.
Additional information about Duo two-factor authentication can be found at Options for Two-Factor Authentication and on the Safe Computing website.