University Two-Step Verification Changes Coming November 14, 2023
On November 14, 2023, improvements to the University Two-Step Verification user experience are coming with the release of Duo Universal Prompt. Duo Universal Prompt is a vendor-supplied Multi-Factor Authentication (MFA) application that will replace Penn’s current custom Two-Step service for PennKey authentication. PennKey will integrate directly with Duo for a seamless user experience. Duo Universal Prompt provides a modern, secure, easy-to-use login interface and a simpler way to add and manage devices.
Note: This does not affect Penn Medicine DUO which you may see when accessing Penn Medicine email.
What to Expect
Current PennKey Two-Step Verification users do not have to re-download the Duo Mobile app or take any actions prior to rollout, but the following changes will occur upon rollout:
- Users will see the new Duo Universal Prompt UI instead of the current Penn custom interface during PennKey WebLogin:
- All existing “Trust this browser” sessions will expire.
- All users will need to authenticate with Two-Step upon their first login after rollout.
- Duo Universal Prompt will enforce a 60-day limit on trusted browsers.
- New login options will be supported – USB security keys and Touch ID (Apple).
- Some legacy Two-Step functions will be retired.
- The PennKey Login UI will also be refreshed and modernized; no functionality changes are expected:
Help & Resources
- Duo Universal Prompt project details
- PennKey Login UI Refresh project details
- Two-Step Verification help documentation (will be updated upon rollout)
- Two-Step Verification help contacts
- Penn’s Identity & Access Management (IAM) Program website