University Two-Step Verification Changes Coming November 14, 2023

On November 14, 2023, improvements to the University Two-Step Verification user experience are coming with the release of Duo Universal Prompt. Duo Universal Prompt is a vendor-supplied Multi-Factor Authentication (MFA) application that will replace Penn’s current custom Two-Step service for PennKey authentication. PennKey will integrate directly with Duo for a seamless user experience. Duo Universal Prompt provides a modern, secure, easy-to-use login interface and a simpler way to add and manage devices.

Note: This does not affect Penn Medicine DUO which you may see when accessing Penn Medicine email.

What to Expect

Current PennKey Two-Step Verification users do not have to re-download the Duo Mobile app or take any actions prior to rollout, but the following changes will occur upon rollout:

• Users will see the new Duo Universal Prompt UI instead of the current Penn custom interface during PennKey WebLogin:

• All existing “Trust this browser” sessions will expire.
  • All users will need to authenticate with Two-Step upon their first login after rollout.
  • Duo Universal Prompt will enforce a 60-day limit on trusted browsers.
• New login options will be supported – USB security keys and Touch ID (Apple).
• Some legacy Two-Step functions will be retired.
• The PennKey Login UI will also be refreshed and modernized; no functionality changes are expected:

Help & Resources

• Duo Universal Prompt project details
• PennKey Login UI Refresh project details
• Two-Step Verification help documentation (will be updated upon rollout)
• Two-Step Verification help contacts
• Penn’s Identity & Access Management (IAM) Program website