On Tuesday, November 14, 2023, Penn will upgrade and modernize its Duo Two-step authentication system to the Duo Universal Prompt. This will better integrate with modern two-step authentication services provided by Duo and provide enhanced services in the future.

Current PennKey Two-Step Verification users do not need to re-download the Duo Mobile app or take any actions prior to rollout, but the following changes will occur on Tuesday, November 14:

Changes in Visual Appearance:

The current PennKey login screen (left, below) will change to the new PennKey login page (right, below).

 

Penn's current Two-Step prompt (left, below) will be replaced by the Duo Universal Prompt (right, below). The new prompt will default to Duo Push with the ability to select other options.

 

All existing “Trust this browser” sessions will expire

• All users will need to authenticate with Two-Step upon their first login starting onTuesday, November 14.
• Duo Universal Prompt will allow a 60-day limit on trusted browsers.

In addition, some legacy two-step functions will be retired:

• “Generate Codes” – Replaced by code generating function within Duo Mobile app or Duo fob. Remember that the Duo app does not require cell service to produce codes.
• User dashboard (enroll, manage settings, trouble logging in) – Replaced by Duo Universal Prompt.
• New Google Authenticator registrations – Replaced by Duo Mobile app. (Existing Google Authenticator registrations will continue to work, but Google Authenticator users are strongly encouraged to migrate to Duo Mobile.)
• Note that for users who use Two-step fobs – existing SafeID fobs will continue to work. Once those fobs need to be replaced (due to an expired battery), users will be able to obtain a new Duo native fob at the library.

 

For further assistance, please contact your Local Support Provider.

For more information about Two-Step Authentication, please see the Quick Start Setup Page.