ArchPass Duo Presentation
In This Presentation: An introduction to Duo Using ArchPass with Duo Upcoming dates Summary
What is Duo? Duo is a modern, phone-based two-factor authentication service to protect users from account compromise and organizations from data breaches.
Duo Supports Multiple Methods
Why Duo? Duo will be used to replace our current Dell Defender hard-tokens used for the ArchPass system. Hard tokens: Run out of batteries Fall out of synchronization Require physical pick-up Easily misplaced Will not scale to cloud or other large deployments
Benefits of Duo Easy to distribute (no pick-up) Self-service options for users Easy to use Multiple authentication methods supported Multiple devices per user Cost effective (site license)
Enrollment Process for Current ArchPass holders Receive email from no-reply@duosecurity.com. Email contains individual link for enrollment. Follow link and enroll your device. Start using ArchPass with Duo.
Using ArchPass with Duo
Authentication Methods Push Notification Passcode Phone Call SMS One-time Codes Hard token Issued when other methods can’t be used Must be paid for by department
Push (Recommended)
Passcode
Phone Call Does not require Duo Security app Receive call from 706-542-3106 Press ‘1’ to confirm or ‘9’ to report fraud
SMS
Review Duo Mobile App No App Required Push Pushes a login request to your phone or tablet. Passcode Generate an OATH code similar to a hardware token. Phone Receive call from 706-542-3106. SMS Receive a bank of one-time codes via text message.
Moving Forward: ArchPass Duo August-September: EITS ArchPass Duo Pilot. September 15: New ArchPass users will enroll in Duo instead of receiving a hard token. October: Current ArchPass users will be invited via email to enroll in Duo. January 2017: Defender server and hardware token decommission.
Moving Forward: VPN conversion Fall TBD: VPN users will receive an email notification whenever they log in to the VPN January 2017: Two-factor authentication required for all remote.uga.edu VPN use.
Moving Forward: Two-factor for applications November: Target for Duo-enabled CAS environment and Duo self-service web site, for testing purposes After January 2017: Begin piloting candidate web applications with Duo-enabled CAS. Sites will be selected based on feedback from key groups TBD: Target employee.uga.edu for CAS/Duo integration.
Questions?