Duo to Add Extra Security Measures Oct. 19

On Oct. 19, KU Information Technology will roll out additional security measures for Duo Multi-Factor Authentication to better protect users from cyberattacks.

When using Duo as part of KU’s Single Sign-On (SSO), most users will not notice a difference when accessing systems such as Canvas, Enroll & Pay, HR/Pay and KU Anywhere VPN. However, users may see increased security when traveling, using a new device or attempting to log in from a new or infrequently used location.

If Duo detects unusual or high-risk activity when users sign in through SSO, Duo Push and hardware tokens will be disabled. Instead, one of the following verification methods will be required: 

• Duo Verified Push: Enter the six-digit code displayed on the login screen into the Duo Mobile app (usually on a phone). 
• Bypass Code: Contact the IT Help Desk for a code that can be entered on the login screen. For those with hardware tokens, this option will work best during regular business hours.  
• Registered Security Key Device: Use a device such as a YubiKey or iCloud Keychain to verify the account. 

When additional authentication is required, instructions and verification options will be displayed on the login screen. If further assistance is needed, faculty and staff can contact their department’s IT support staff or the KU IT Help Desk at ITHelpDesk@ku.edu or 785-864-8080.