1. ArchPass Duo Presentation

2. In This Presentation: An introduction to Duo Using ArchPass with Duo
Upcoming dates
Summary

3. What is Duo?
Duo is a modern, phone-based two-factor authentication service to protect users from account compromise and organizations from data breaches.

4. Duo Supports Multiple Methods

5. Why Duo?
Duo will be used to replace our current Dell Defender hard-tokens used for the ArchPass system.
Hard tokens:
Run out of batteries
Fall out of synchronization
Require physical pick-up
Easily misplaced
Will not scale to cloud or other large deployments

6. Benefits of Duo Easy to distribute (no pick-up)
Self-service options for users
Easy to use
Multiple authentication methods supported
Multiple devices per user
Cost effective (site license)

7. Enrollment Process for Current ArchPass holders
Receive from
contains individual link for enrollment.
Follow link and enroll your device.
Start using ArchPass with Duo.

9. Using ArchPass with Duo

10. Authentication Methods
Push Notification
Passcode
Phone Call
SMS One-time Codes
Hard token
Issued when other methods can’t be used
Must be paid for by department

11. Push (Recommended)

12. Passcode

13. Phone Call Does not require Duo Security app
Receive call from
Press ‘1’ to confirm or ‘9’ to report fraud

14. SMS

15. Review Duo Mobile App No App Required Push
Pushes a login request to your phone or tablet.
Passcode
Generate an OATH code similar to a hardware token.
Phone
Receive call from
SMS
Receive a bank of one-time codes via text message.

16. Moving Forward: ArchPass Duo
August-September: EITS ArchPass Duo Pilot.
September 15: New ArchPass users will enroll in Duo instead of receiving a hard token.
October: Current ArchPass users will be invited via to enroll in Duo.
January 2017: Defender server and hardware token decommission.

17. Moving Forward: VPN conversion
Fall TBD: VPN users will receive an notification whenever they log in to the VPN
January 2017: Two-factor authentication required for all remote.uga.edu VPN use.

18. Moving Forward: Two-factor for applications
November: Target for Duo-enabled CAS environment and Duo self-service web site, for testing purposes
After January 2017: Begin piloting candidate web applications with Duo-enabled CAS.
Sites will be selected based on feedback from key groups
TBD: Target employee.uga.edu for CAS/Duo integration.

19. Questions?