Protect Yourself: Fighting MFA Fatigue

MFA FatigueLast week, OIT notified the campus of a successful phishing campaign targeting the SMU community. In this campaign, we noted that cybercriminals had begun using a new technique where they repeatedly send Duo requests to users who have shared their username and password to annoy users into approving the two-factor request.

This technique, referred to as “MFA fatigue,” has become increasingly common, and over the next several weeks, OIT will begin implementing measures to combat this trend. In the meantime, we recommend you take the following actions if you notice something suspicious: Continue reading Protect Yourself: Fighting MFA Fatigue

DUO: A Substantial Expansion

DuoSix years ago, SMU implemented DUO to protect our data proactively. Since introducing two-factor authentication (2FA), we have seen quite an expansion throughout our services.

We first implemented DUO in 2016 to protect access to my.SMU and later webmail for our faculty and staff as passwords can often be stolen, guessed, and hacked, and we needed a solution to secure our data better. Once our faculty and staff gained familiarity with DUO, it was introduced to students on April 1, 2019, through our “Security is No Joke” campaign. Continue reading DUO: A Substantial Expansion

Duo Mobile Ends Support for Android 8/9 and iOS 13

DuoOver the past several years, we have begun to rely heavily on Duo Security for our Two-Factor Authentication. With the ending of support for SMS and Phone Callback verification this year, the Duo Mobile app has become our preferred method of authenticating with our services. Because of that, changes to the app impact us all, and we want you to be aware that effective February 9, 2023, Duo Mobile will no longer support Android 8, Android 9, and iOS 13. Due to this change, we highly recommend the SMU community upgrades their devices’ operating systems by February 1, 2023. Continue reading Duo Mobile Ends Support for Android 8/9 and iOS 13

Quick Tip: Adding a New Device in Duo

In this installment of the OIT Quick Tip, I’ll show you how to add a new device to your Duo two-factor authentication service.

As you may have already heard, we are removing the option to use telephone calls and SMS (text messages) to authenticate with Duo in January. It is important to have another authentication method in place to prevent any interruption in service. Be sure to contact the IT Help Desk if you need any assistance or have any questions about this upcoming change.

Duo Adding Second Device: Critical Action Needed!

DuoIf you are one of the few University employees only using your SMU landline as a registered Duo authentication device, now is the time to add a second device. We are highly encouraging all users to set up a second device for use with Duo Multi-Factor Authentication to gain access to University services if working from off-campus. We highly recommend using the Duo Mobile app for your smartphone and/or setting up your home phone as a new device. Continue reading Duo Adding Second Device: Critical Action Needed!