Duo authentication changes - Revision history

Shtsai at 19:02, 2 September 2026

2026-09-02T19:02:39Z

← Older revision		Revision as of 15:02, 2 September 2026
Line 88:		Line 88:
	Users who do not have a mobile phone registered for Duo push and who opt to use a hard token for Duo authentication will see something like this when they ssh into Sapelo2:		Users who do not have a mobile phone registered for Duo push and who opt to use a hard token for Duo authentication will see something like this when they ssh into Sapelo2:

			<pre class="gscript">
			[shtsai@localhost ~]$ ssh shtsai@sapelo2.gacrc.uga.edu
			(shtsai@sapelo2.gacrc.uga.edu) Password:
			(shtsai@sapelo2.gacrc.uga.edu) UGA DUO authentication is required for SSH/SCP access to
			GACRC systems.

			UGA DUO is a two-factor authentication service which
			requires a password (one factor) and a code, phone,
			or device (second factor) to successfully authenticate.

			If you are not enrolled in the UGA DUO service please
			visit the UGA DUO service self-service portal to enroll
			and configure or manage your DUO enabled devices.

			https://archpass.uga.edu

			For additional help with UGA DUO authentication or to
			report an issue please visit:

			https://uga.teamdynamix.com/TDClient/3190/eitsclientportal/KB/Category/23825/ArchPass-powered-by-Duo
			Duo two-factor login for shtsai

			Enter a passcode or select one of the following options:

			Passcode:

			</pre>

			Entering the passcode provided by the hard token will enable Duo authentication.

Shtsai at 19:00, 2 September 2026

2026-09-02T19:00:56Z

@@ Line 32: / Line 32: @@
 This change will remove two less secure MFA options in Duo while introducing more secure methods for logging in to UGA systems. These updates align Duo MFA with current security best practices and support enhanced protection for UGA systems and data.
 ===How will these changes affect access to GACRC clusters and servers===
@@ Line 90: / Line 83: @@
 Passcode or option (1-1): 401321
 </pre>

Shtsai at 18:19, 2 September 2026

2026-09-02T18:19:45Z

@@ Line 77: / Line 77: @@
 Last login: Wed Sep  2 13:42:52 2026 from 172.22.72.26
 [shtsai@ss-sub4 ~]$
 </pre>

Shtsai: /* How will these changes affect access to GACRC clusters and servers */

2026-09-02T18:13:50Z

How will these changes affect access to GACRC clusters and servers

← Older revision		Revision as of 14:13, 2 September 2026
Line 42:		Line 42:
	===How will these changes affect access to GACRC clusters and servers===		===How will these changes affect access to GACRC clusters and servers===

	Prior to these changes most users who has a mobile phone registered with Archpass Duo were offered three options when then ssh into e.g. Sapelo2. After September 17, most users will only see one option, as illustrated below:		Prior to these changes most users who has a mobile phone registered with Archpass Duo were offered three options when then ssh into e.g. Sapelo2.

			After September 17, most users will only see one option, as illustrated below:

	<pre class="gscript">		<pre class="gscript">

Shtsai: /* How will these changes affect access to GACRC clusters and servers */

2026-09-02T18:13:27Z

How will these changes affect access to GACRC clusters and servers

@@ Line 45: / Line 45: @@
 <pre class="gscript">
-sample
+[shtsai@localhost ~]$ ssh shtsai@sapelo2.gacrc.uga.edu
 </pre>

Shtsai at 18:10, 2 September 2026

2026-09-02T18:10:55Z

← Older revision		Revision as of 14:10, 2 September 2026
Line 32:		Line 32:
	This change will remove two less secure MFA options in Duo while introducing more secure methods for logging in to UGA systems. These updates align Duo MFA with current security best practices and support enhanced protection for UGA systems and data.		This change will remove two less secure MFA options in Duo while introducing more secure methods for logging in to UGA systems. These updates align Duo MFA with current security best practices and support enhanced protection for UGA systems and data.

	==Additional Information===		===Additional Information===

	To update your Duo Verification method, visit the [https://archpass.uga.edu/ Duo Self-Service portal].		To update your Duo Verification method, visit the [https://archpass.uga.edu/ Duo Self-Service portal].
Line 39:		Line 39:

	For more information about these updates, available authentication methods and step-by-step resources, [https://eits.uga.edu/about-us/major-initiatives/duo-verification-methods-improvements/duo-improvements-overview/ visit the EITS Major Initiatives page: Duo Verification Methods Improvements].		For more information about these updates, available authentication methods and step-by-step resources, [https://eits.uga.edu/about-us/major-initiatives/duo-verification-methods-improvements/duo-improvements-overview/ visit the EITS Major Initiatives page: Duo Verification Methods Improvements].

			===How will these changes affect access to GACRC clusters and servers===

			Prior to these changes most users who has a mobile phone registered with Archpass Duo were offered three options when then ssh into e.g. Sapelo2. After September 17, most users will only see one option, as illustrated below:

			<pre class="gscript">
			sample
			</pre>

Shtsai: /* New Secure Authentication Options */

2026-09-02T17:34:27Z

New Secure Authentication Options

← Older revision		Revision as of 13:34, 2 September 2026
Line 18:		Line 18:
	Effective Summer 2026, users have access more secure options, including:		Effective Summer 2026, users have access more secure options, including:

	* Duo Mobile app (push notifications and passcodes)		* Duo Mobile app (push notifications and passcodes)

	* Platform authenticators (such as fingerprint or facial recognition on your device)		* Platform authenticators (such as fingerprint or facial recognition on your device)

	* Roaming authenticators (such as USB security keys)		* Roaming authenticators (such as USB security keys)

	* Duo Desktop authentication (Duo authentication for your computer)		* Duo Desktop authentication (Duo authentication for your computer)

	* Duo Hard Tokens (physical keychain devices that provide a Duo code)		* Duo Hard Tokens (physical keychain devices that provide a Duo code)

	===Why This Change Is Happening===		===Why This Change Is Happening===

Shtsai: Created page with " ==Duo Phone Call and SMS Text Verification Retirement Sept.17, 2026== To enhance security and reduce phishing attempts, Enterprise Information Technology Services (EITS) is updating Duo multi-factor authentication (MFA) methods for all Duo users at the University of Georgia. These changes are part of EITS’ ongoing efforts to better protect UGA accounts. As part of these improvements, EITS will remove the two less secure verification methods, SMS text messages and ph..."

2026-09-02T17:33:51Z

Created page with " ==Duo Phone Call and SMS Text Verification Retirement Sept.17, 2026== To enhance security and reduce phishing attempts, Enterprise Information Technology Services (EITS) is updating Duo multi-factor authentication (MFA) methods for all Duo users at the University of Georgia. These changes are part of EITS’ ongoing efforts to better protect UGA accounts. As part of these improvements, EITS will remove the two less secure verification methods, SMS text messages and ph..."

New page

==Duo Phone Call and SMS Text Verification Retirement Sept.17, 2026==

To enhance security and reduce phishing attempts, Enterprise Information Technology Services (EITS) is updating Duo multi-factor authentication (MFA) methods for all Duo users at the University of Georgia. These changes are part of EITS’ ongoing efforts to better protect UGA accounts.

As part of these improvements, EITS will remove the two less secure verification methods, SMS text messages and phone calls, and introduce more secure authentication options to safeguard UGA accounts.

===What is Changing?===

Beginning September 17, 2026, SMS text messages and phone calls will no longer be available as verification methods in Duo for students, faculty and staff. These methods are being retired because they are less secure.

The same change will go into effect for Departmental MyID accounts on November 5, 2026. Beginning on that date, SMS text messages and phone calls will no longer be available as Duo verification methods for Departmental MyIDs.

SMS text messages and phone calls were removed as verification methods for UGA retirees and owners of IT administrative accounts this summer.

===New Secure Authentication Options===

Effective Summer 2026, users have access more secure options, including:

* Duo Mobile app (push notifications and passcodes)

* Platform authenticators (such as fingerprint or facial recognition on your device)

* Roaming authenticators (such as USB security keys)

* Duo Desktop authentication (Duo authentication for your computer)

* Duo Hard Tokens (physical keychain devices that provide a Duo code)

===Why This Change Is Happening===

This change will remove two less secure MFA options in Duo while introducing more secure methods for logging in to UGA systems. These updates align Duo MFA with current security best practices and support enhanced protection for UGA systems and data.

==Additional Information===

To update your Duo Verification method, visit the [https://archpass.uga.edu/ Duo Self-Service portal].

For assistance in updating your method, contact the [https://eitshelpdesk.uga.edu/ EITS Help Desk].

For more information about these updates, available authentication methods and step-by-step resources, [https://eits.uga.edu/about-us/major-initiatives/duo-verification-methods-improvements/duo-improvements-overview/ visit the EITS Major Initiatives page: Duo Verification Methods Improvements].