1 ArchPass Duo Presentation

2 In This Presentation: An introduction to Duo Using ArchPass with DuoUpcoming dates Summary

3 What is Duo? Duo is a modern, phone-based two-factor authentication service to protect users from account compromise and organizations from data breaches.

4 Duo Supports Multiple Methods

5 Why Duo? Duo will be used to replace our current Dell Defender hard-tokens used for the ArchPass system. Hard tokens: Run out of batteries Fall out of synchronization Require physical pick-up Easily misplaced Will not scale to cloud or other large deployments

6 Benefits of Duo Easy to distribute (no pick-up)Self-service options for users Easy to use Multiple authentication methods supported Multiple devices per user Cost effective (site license)

7 Enrollment Process for Current ArchPass holdersReceive from contains individual link for enrollment. Follow link and enroll your device. Start using ArchPass with Duo.

8

9 Using ArchPass with Duo

10 Authentication MethodsPush Notification Passcode Phone Call SMS One-time Codes Hard token Issued when other methods can’t be used Must be paid for by department

11 Push (Recommended)

12 Passcode

13 Phone Call Does not require Duo Security appReceive call from Press ‘1’ to confirm or ‘9’ to report fraud

14 SMS

15 Review Duo Mobile App No App Required PushPushes a login request to your phone or tablet. Passcode Generate an OATH code similar to a hardware token. Phone Receive call from SMS Receive a bank of one-time codes via text message.

16 Moving Forward: ArchPass DuoAugust-September: EITS ArchPass Duo Pilot. September 15: New ArchPass users will enroll in Duo instead of receiving a hard token. October: Current ArchPass users will be invited via to enroll in Duo. January 2017: Defender server and hardware token decommission.

17 Moving Forward: VPN conversionFall TBD: VPN users will receive an notification whenever they log in to the VPN January 2017: Two-factor authentication required for all remote.uga.edu VPN use.

18 Moving Forward: Two-factor for applicationsNovember: Target for Duo-enabled CAS environment and Duo self-service web site, for testing purposes After January 2017: Begin piloting candidate web applications with Duo-enabled CAS. Sites will be selected based on feedback from key groups TBD: Target employee.uga.edu for CAS/Duo integration.

19 Questions?