Announcement Date
Thursday, October 10, 2024 - 1:39
Dear faculty, staff, and students,
Duo Push is one of the Two-Step Verification options when logging into a PennKey-protected service. For users with Duo Push enabled, a notification is sent to the user’s smartphone or tablet to verify identity.
On October 23, 2024, Verified Duo Push will replace Duo Push. Instead of clickable “Deny” or “Approve” options, with Verified Duo Push the user enters a three-digit code (see images below). The
code gives added protection against cybersecurity attacks where users are spammed with push requests until they reply “yes.”
This change only applies to users who have Duo Push enabled as their Two-Step Verification method.
What Will Change
Only the Duo Push process to establish a PennKey SSO session or log into Microsoft O365 will change. Users will continue to use the Duo Mobile app and other login options as they do today. Changes include:
- Instead of the “Deny/Approve” buttons, users will be shown a code to enter on their mobile device when responding to the Push.
- Users who do not have Duo Push enabled will still be able to log in the way they do today to access PennKey SSO applications. These users are strongly encouraged to adopt Push to take advantage of better protection.
Help & Resources
- Access ISC’s Two-Step Verification help documentation.
- If you need assistance, please reach out to Weitzman ITS – ithelp@design.upenn.edu