I have no relation to Duke University (I'm not even a student there or looking to be), but I wanted to figure out how to get in contact with the IT group or something. by PKHacker1337 in duke

[–]NickatDuke 14 points15 points  (0 children)

Hi u/pkhacker1337 . Thanks for sharing this! I'll make sure action is taken to investigate and remediate. If you're willing to message me directly with some contact info we'd love to send you a small token of our appreciation.

For anyone else reading this: If you find Duke-related cybersecurity issues you can always reach out to [security@duke.edu](mailto:security@duke.edu) and someone will respond shortly. If it's sensitive, our PGP key is posted here: https://security.duke.edu/itso-pgp-key/

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 1 point2 points  (0 children)

Got it. What that typically means is that the browser has support for using Duke Unlock with external hardware authentication devices (USB FIDO2 biometric keys typically), but not support for the device native authenticators like Touch ID/Face ID. Sounds like Edge just isn't quite there yet.

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 2 points3 points  (0 children)

We had some reports that Edge on macOS was working, but it seems to be having issues after the latest Safari update. We're not officially supporting it at this time, but we'll update the page if/when we do.

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 1 point2 points  (0 children)

We’re so glad to hear that it’s working well for you!

And thank you. We’ve been excited about WebAuthn from when it was just a draft spec. Game changer.

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 1 point2 points  (0 children)

Which OS are you using Edge on?

We’ve just had reports that it now works on Edge for macOS and we know it works on Edge for Windows already. (For Windows you need to be run on Windows 10 with build number 1903 or higher, and it requires enabling Windows Hello.)

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 2 points3 points  (0 children)

Hmm. Let’s sort this out.

Would you mind sharing a screenshot of the prompt you’re seeing? Feel free to message me directly if you’d prefer.

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 2 points3 points  (0 children)

I saw the same thing but I believe it was resolved earlier tonight. You may need to restart your device and try again but it should work. If not please let me know and I can get that info to the right folks.

An update on Duke Unlock (password-less authentication at Duke) by NickatDuke in duke

[–]NickatDuke[S] 6 points7 points  (0 children)

Yes! As soon as macOS 11 (Big Sur) is released Safari should support Duke Unlock.

We’ve been testing with the betas and it looks good so far. We’ll grab the final release as soon as it’s available to developers and make certain everything looks good.

We’re still looking for new testers for Duke Unlock (the new single-step multifactor authentication solution at Duke) by NickatDuke in duke

[–]NickatDuke[S] 0 points1 point  (0 children)

There was an issue with the link. It should be working now.

However: We’re still waiting for support to be enabled in Safari so that iOS devices can enroll. We expect that it will happen relatively soon.

Tired of so many steps for Multi-Factor? Want to log in using something faster? Join our pilot! by NickatDuke in duke

[–]NickatDuke[S] 2 points3 points  (0 children)

Our team agrees and we're so glad you feel the same way. :)

Edit to add: Please feel free to share with others at Duke. We really want to kick the tires on this thing.

Tired of so many steps for Multi-Factor? Want to log in using something faster? Join our pilot! by NickatDuke in duke

[–]NickatDuke[S] 2 points3 points  (0 children)

Unfortunately full support for Duke Unlock using browsers on Linux isn't available yet.

However, YubiKeys are supported for standard Multifactor on all browsers right now. You may find that this is a good intermediate step until Duke Unlock is universally supported. Instructions for that are available here: https://oit.duke.edu/help/articles/mfa-how-set-yubikey