Scheduled Service Change: REMINDER: Upcoming Changes to Two-Step Login (Duo) on 11/4
Event:
2025-11-04 09:00:00
Expected Duration:
2025-11-04 10:00:00
Status:
Closed
Brief Description:
On Tuesday, November 4, CIT will start requiring Duo Verified Push for all Duo Mobile app users and will start removing the Duo Phone Call and Duo SMS Passcode options.
User Impact:
Users will no longer be able to use voice phone calls or SMS passcodes to log in, but can use the Duo Mobile app or other options (yubikeys, touch id on your laptop, hardware token, etc).
Services Affected:
Authentication and Authorization
Subsites Affected:
Two-Step Login
Full Description:
As described in this IT@Cornell News article, on Tuesday November 4, Cornell continues the roll-out of changes intended to improve Two-Step Login security. In response to increased threats to Cornell NetID passwords and university services, CIT will require Duo Verified Push for all Duo Mobile app users and will remove the Duo Phone Call and Duo SMS Passcode options.
This change affects approximately 30% of Cornell Duo customers and communications went to all affected individuals on October 22. Enforcement of the policy will roll out gradually and adjust based on the impact to service support providers.
CIT TDX ID:
2014421
Timeline of Changes
| Description | Current Status | Date | Time |
|---|---|---|---|
As described in this IT@Cornell News article, on Tuesday November 4, Cornell continues the roll-out of changes intended to improve Two-Step Login security. In response to increased threats to Cornell NetID passwords and university services, CIT will require Duo Verified Push for all Duo Mobile app users and will remove the Duo Phone Call and Duo SMS Passcode options. This change affects approximately 30% of Cornell Duo customers and communications went to all affected individuals on October 22. Enforcement of the policy will roll out gradually and adjust based on the impact to service support providers. |
2025-10-30 | 13:55:39 |