Two-Step Verification Changes Now Complete
We are pleased to announce that improvements to the Two-Step Verification user experience are now complete with the rollout of Duo Universal Prompt. Duo Universal Prompt is a vendor-supplied Multi-Factor Authentication (MFA) application that has replaced Penn’s custom solution for PennKey Two-Step Verification. PennKey is now integrated directly with Duo for a seamless user experience.
What Changed
Current PennKey Two-Step Verification users do not have to re-download the Duo Mobile app, but will see the following changes:
- Users will see the new Duo Universal Prompt UI instead of the previous Penn custom interface during PennKey WebLogin.
- All existing “Trust this browser” sessions will have expired. Users need to authenticate with Two-Step upon their first login. Browser trust can be enabled for 60 days by clicking “Yes, this is my device” during login.
- New login options are supported – USB security keys and Touch ID (Apple).
- Some legacy Two-Step functions were retired.
- PennO365 Two-Step also changed to Duo Universal Prompt – Device trust now works across PennKey SSO and O365 logins.
- The PennKey Login UI was refreshed and modernized with no functionality changes.
Managing Devices
To make changes to Two-Step Verification (add, rename, or delete devices), use the Duo Device Management Portal. Click the item you want to change and follow the prompts.
Help & Resources
- Two-Step Verification help documentation website
- Users can find support contacts on the Two-Step Verification help contacts page
- Support providers may contact ISC Client Care for issues
- Duo Universal Prompt project details
- PennKey Login UI Refresh project details
- Penn’s Identity & Access Management (IAM) Program website