2FA, Duo Universal Prompt Overview

Urbana users may see the new Duo Universal Prompt when accessing certain web resources. These include Microsoft365 (Outlook, Word, Excel, etc.) and Shibboleth (Canvas, Box, Zoom, Moodle, etc.) applications.

Overview

The Duo Universal Prompt is the next-generation version of Duo's interactive, web-based authentication. The new prompt is more adaptive and contextually aware, providing additional security, while being easier to use and more accessible for end users. Other than a visual change, the most obvious difference that users will experience is that instead of showing the Duo prompt within the sign-in page, users will be redirected to a page hosted by Duo at duosecurity.com to show the Duo prompt, and then redirect back to the protected application after two-factor authentication is completed.

  • The new Duo Universal Prompt will live alongside the existing AITS Duo iFrame, which will be presented when accessing AITS applications (Banner, HR Reporting, My UI Info, NetID Center, Direct Deposit, etc.).
  • Users can enroll in 2FA for the first time via the Duo Universal Prompt, even while off-campus.
  • The Duo Universal Prompt helps keep users secure by automatically choosing the most secure authentication option by default.
  • Users can manage devices from a Duo Universal Prompt window, avoiding the need to visit a different page. In addition, the Duo Universal Prompt enables users to enroll and use more secure authentication devices such as WebAuthn/FIDO2 security keys.
    Note:
      • Hardware tokens purchased from the Webstore must be initially enrolled in the NetID Center. The tokens can then be used at either Duo prompt.
      • Users bringing their own compatible WebAuthn/FIDO2 Security Key can only enroll and use the device via the Duo Universal Prompt.
      • Yubikey 5 NFC devices sold through the Webstore can be set up as a hardware token through the NetID Center and as a WebAuthn/FIDO2 key via the Universal Prompt.
  • The Remember Me function of Duo is functionally the same as before, but now it will ask you 'Trust this browser?'.
    • This will reduce the amount of times you have to authenticate with Duo.
    • Do not trust the browser when using a public or shared computer! Trust the browser only when you access applications from your own computer.
    • You'll see this prompt when logging in via desktop apps such as Outlook or Teams as well. 
    • More information can be found here: 2FA - Remember Me

2FA Topics

Visual Difference
(New) Duo Universal Prompt AITS Duo iFrame
Duo Universal Prompt AITS Duo iFrame



Keywords:2fa duo universal prompt two 2 factor authentication multi mfa webauthn hardware token push mobile   Doc ID:120093
Owner:ID M.Group:University of Illinois Technology Services
Created:2022-07-29 20:10 CDTUpdated:2022-08-15 13:14 CDT
Sites:University of Illinois System, University of Illinois Technology Services
Feedback:  0   0