Overview of Duo 2FA

Two-factor authentication (2FA) uses DuoSecurity to add a second layer of security when accessing protected systems and services. Tufts requires 2FA for all students, faculty, staff, and affiliates.

Issue

Users logging into applications requiring Duo multi-factor authentication on an iOS 18 or newer device may experience issues approving a Duo push when using the mobile Safari browser. This issue has been reported only with the Safari browser on mobile devices.

Workaround

1. When you receive the Duo Mobile push notification, instead of tapping on the notification banner, press and hold the banner.
2. A popup menu will appear offering you the options to Approve or Deny the request (or, if using Duo Verified Push, the option to Enter code or deny).
   
   
3. Select the appropriate option to complete the verification process as needed. This will successfully log you in without sending Safari to the background.

Resolution

Duo (Cisco) is actively working on a permanent fix. An updated version of the Duo app is expected to be released via the Apple App Store between January 9th and January 20th.

More Information:

For additional details, including the official workaround and updates on the resolution, please see Duo's known issues article.