MFA-Duo - Accessibility & Usability Information

This document details MFA-Duo specific usability and accessibility information including known issues, functional workarounds and how to get help.

Background

Multi-Factor Authentication is continuously evaluated for usability and accessibility. Below are the accessibility and usability barriers of the MFA process and device options. For assistance, questions, or accessibility feedback, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. For more information regarding Duo Security product accessibility see Duo Security vendor accessibility information.

To view a listing of all MFA devices and features see MFA-Duo Device Options.

(Multi-Factor Authentication is a second login step after NetID login. For more information see What is Multi-Factor Authentication.) 

Accessibility and usability issues and assistance

The Duo Mobile App menu is rarely used by users. However, the button is a linked image rather than a menu button and can be difficult to find for people with blindness or low vision. UW–Madison is working with the vendor (Duo Security) to update the menu link to a button with a more helpful label of "Duo Menu."

Finding the menu button

To locate the mobile application menu button, browse the touch screen interface using your stylus or finger. The menu is a linked image with the alternative text of “hamburger menu.”

For assistance with this workaround, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

Duo and OTP c100 token/fobs are less usable for some users

People with blindness or low vision may not be able to read the passcode on the Duo or OTP c100 token/fobs because the passcode characters are small, the screen is not backlit, and the expiration time for the passcode entry is short. Additionally, the screen orientation is not clear, making it easy to input the passcode upside down. Additionally, users with motor impairments, tremors, or dexterity limitations may be unable to press and hold the button long enough to generate a passcode. (See MFA-Duo - How to Register a USB Security Key for more details.)

Token/fobs also can be out of sync, and stop working. This occurs if several codes are generated outside of the login process, meaning if the user presses the button multiple times while not in the process of logging in. (See What if my token/fob stops working for more details.)

Get a Feitian USB security key

For people who have difficulty using a token/fob, UW–Madison offers a new device called a Feitian USB security key which allows the user to insert the security key into their USB port of their computer or laptop to authenticate. 

If you are a new employee, get a Feitian security key from your HR representative. Feitian security keys can also be purchased at the DoIT Tech Store at 1210 W. Dayton Street Madison, WI 53706.

For other assistance, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

Duo and Feitian Token/Fob related links

Feitian USB Security Key compatibility

This new device to campus is a USB security key. This security key allows the user to insert the security key into the USB port of their computer or laptop to authenticate. This security key requires a reachable USB port, but this security also works with a laptop or desktop USB to USB-C adaptor. The key is not compatible with mobile devices and only works with laptop or desktop computers. 

The security key experience is slightly different for the following modes of logging in:

See below for details on these modes.

Chrome web browser login

When logging in to a UW–Madison website or apps using Chrome (version 70 or later), insert the security key into your USB port, select Security Key (U2F) from the device dropdown menu, and lightly touch the impressed sensor button to initiate login. (See How to use a Feitian USB Security Key for details and screenshots on the Chrome web browser login.)

Non-Chrome browser or local software login

When logging into a UW–Madison website or app in Firefox or Safari, insert the security key into your USB port. Select Token from the device dropdown menu, and click the "Enter passcode" button to make the passcode input field editable. Then lightly touch the impressed sensor button to insert the passcode in the input field. 

If you are using a screen reader or other assistive technology, the security key may enter the passcode so quickly, you may not hear the full code. The audio cue may only include the last digit of the code. Click the login button to complete authentication, as the full code should have populated the field. 

(See How to use a Feitian USB Security Key for more details and screenshots on the Chrome web browser login.)

If you are a new employee, get a Feitian security key from your HR representative. Feitian security keys can also be purchased at the DoIT Tech Store at 1210 W. Dayton Street Madison, WI 53706.

For other assistance, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

Feitian USB Security Key related links

How do I get more help?

For assistance, questions, or accessibility feedback, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. For more information regarding Duo Security product accessibility see Duo Security vendor accessibility information.




Keywords:multi-factor authentication usability access disability tactile blind mfa token hard of hearing assistive technology low vision low-vision motor impairment dexterity fob keyfob auditory cognitive   Doc ID:88623
Owner:Abrianna B.Group:Multi-Factor Authentication (MFA)
Created:2018-12-20 14:36 CDTUpdated:2019-04-28 13:52 CDT
Sites:DoIT Help Desk, DoIT Tech Store, Multi-Factor Authentication (MFA)
Feedback:  0   0