#InsideIT

If you use Duo Multi-Factor Authentication (MFA) to sign in to KAUST systems, you will soon notice a new sign-in screen.

The updated Duo experience has a cleaner design and makes signing in with Duo Push a little faster. Your enrolled devices and authentication methods will continue to work as they do today.

What is changing?

Duo is the company that provides the Multi-Factor Authentication service protecting your KAUST account. Duo has redesigned its sign-in screen, and the new design is called the Universal Prompt. This is a vendor update, so every organization that uses Duo is moving to it.

KAUST IT is progressively introducing Duo's new sign-in experience across systems that require Multi-Factor Authentication.

The rollout begins in phases on Thursday, 30 July, and will continue gradually across all KAUST systems, applications, and platforms.

You will gradually begin seeing the new screen when signing in to services such as:

• KAUST VPN
• The KAUST Portal
• Other KAUST applications, platforms, and systems that use Duo MFA

The rollout will happen in stages. This means you may see the new screen in one KAUST system before it appears in another. Both screens are equally secure, so there is nothing to worry about if you see the new screen in one place and the current screen in another.

What is better?

If you normally approve sign-ins using Duo Push, the new screen sends the push notification automatically by default.

This saves you one click each time you sign in. Simply open the Duo Mobile app and approve the request as usual.

If you prefer to use a passcode or another enrolled authentication method, select Other options on the Duo screen.

The new screen also includes a Trust this browser option. Selecting it tells Duo to remember that browser on that device for a set period, so you are not prompted every time you sign in. Use it on devices only you use, and leave it unselected on shared or public computers.

What will the new screen look like?

The images below show the current Duo screen and the new screen you will begin seeing during the rollout.

Before: Current Duo Prompt

After: New Duo Prompt

What if the push does not arrive?

Open the Duo Mobile app on your phone. The request will usually be waiting there even when the notification does not appear.

If there is still no request, select Other options on the Duo screen and choose a passcode or another method you have already enrolled.

What is not changing?

• Your phone and other enrolled devices will continue to work.
• Your available authentication methods will stay the same.
• Your account will continue to be protected by Duo MFA.
• You do not need to enroll your device again.

Need help?

If you are setting up Duo for the first time or would like a refresher, visit our Set Up Duo Multi-Factor Authentication guide.

The guide explains how to enroll your device, approve Duo Push notifications, and use the available authentication methods.

If you still need help, start a chat with VITA or contact the IT Service Desk.