The look of multi-factor authentication is changing
Duo, the third-party application that the University of Alberta uses for multi-factor authentication (MFA) is changing its look. Now, when you attempt to access certain university applications that use CCID for authentication such as Google Workspace apps, PeoplSoft (Campus Solutions, Finance and HCM), My CCID and IAM, etc. the prompt screen that comes up to initiate logging in, will have a different appearance.
This change will come into effect on the evening of December 1, 2023 and provides a more simplified and accessible log in experience for web-based applications as well as a redesigned interface with security and usability improvements.
MFA is the process of confirming a person’s identity using multiple factors to verify who they are when accessing systems, such as having a passcode sent to your device to log into an application. It has shown to be one of the most effective controls against account compromise, and as such, has become standard across industry sectors, including higher education.
Since November 2022 when the university adopted MFA, this is what the prompt has looked like:
As of December 1, the prompt screen will now look like this:
If you have the Duo mobile app installed on your device, the first time you use the new prompt it will be the default authentication option. However, if you do not have the mobile app installed, then Duo will instead default to your MFA key fob. If you happen to have both the app and key fob, the mobile app push authentication will be the default.
You have the ability to change this to whichever login method you prefer to use, by selecting “Other options.” For every subsequent log in, the Duo prompt screen will default to whatever method was used for the previous log in.
Other options to log in include the following:
- Hardware token — Using the Duo fob
- Duo Push — Using the Duo app on your mobile device
- Duo Mobile passcode — Using the Duo app to receive a six-digit code
- Bypass code — Calling the IT Service Desk to be validated to receive a six-digit code (recommended for those who have lost their Duo fob or do not have a mobile device.)
Please note that no matter your login preference, the functionality of MFA is not changing, only the appearance of the prompt for a more straightforward user experience.
Should you have any questions, please refer to the Multi-Factor Authentication for Faculty and Staff web page.