MFA-Duo - Accessibility Information

This document details MFA-Duo specific usability and accessibility information including known issues, functional workarounds and how to get help.

In compliance with the Americans with Disabilities Act and the Federal Rehabilitation Act, UW-Madison has evaluated our implementation of Multi-Factor Authentication for usability and accessibility.

What's on this page?

  • Background
  • Duo iPhone app known accessibility issues
  • How do I get more help?

Background

Multi-Factor Authentication (MFA) project is the campus-wide implementation of a second verification step to the NetID login process for web-based applications. MFA provides an additional layer of protection to a user digital identity to protect against breaches which involve compromised usernames and passwords. For more information on Multi-Factor Authentication and Duo Security, see What is Multi-Factor Authentication.

Duo iPhone and Android mobile app known accessibility issues

Difficulty knowing when there is a new authentication notification

Users with visual impairments and blindness don’t receive sufficient feedback that a new authentication is pending in the Duo Mobile App (iPhone).

Workaround for authentication accessibility issue

To locate new authentications within the mobile application, browse the touch screen interface using your stylus or finger with your mobile screen reader or other assistive technology on. The new authentication will be located at the top of the screen and will read, “Request waiting. Tap to respond.”

UW-Madison is working with the vendor (Duo Security) to change user focus to the new authentication notifications. This will provide an auditory indication that a new notification arrived, and will allow the user to click directly into the new authentication and click approve.

For assistance with this workaround, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

Difficulty finding menu button in Duo Mobile App

The Duo Mobile App menu (hamburger) button is a linked image rather than a button. This causes confusion and makes it difficult for low vision and blind users to find the menu.

Workaround for menu button issue

To locate the mobile application menu button, browse the touch screen interface using your stylus or finger. The menu is a linked image with the alternative text of “hamburger menu.”

For assistance with this workaround, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu.

Status of menu button issue

UW-Madison is working with vendor (Duo Security) to update the menu link to a button with a more helpful label of "Duo Menu."

Duo token accessibility issues

The following access barriers were discovered during accessibility testing of the Duo token. DoIT is actively researching and testing more accessible token options for users. We will update this document when more details are known.

The security code is visual-only, without a read-aloud option.

Users who are blind or who have low vision will not be able to read the code in order to enter it on screen.

No screen orientation directional feedback exists on the device.

Users (all abilities) may not be able to identify if the device is “right side up” because of a logo that could be either DUO or ONE and a button that’s positioned for left-handed activation. This results in reading a different code on the 7-digit display, for example a six (6) could be read as either a six (6) or a nine (9) thus rendering the code inaccurate.

No backlight for the screen with small and low contrast digits.

Users (all disabilities) as well as those with age-related nearsightedness may have difficulty reading the small, low contrast, no backlit code digits.

Deep, difficult-to-press button

Users with motor impairments, tremors, or dexterity limitation may be unable to press and hold the token button to generate a code.

How often is accessibility evaluated

Accessibility assessments, which are conducted throughout the planning and implementation process by the Center for Digital Accessibility & User Experience, were performed on the following dates:

  • May 22, 2018
  • August 22, 2018
  • September 4, 2018
  • September 10, 2018
  • November 2, 2018
  • Research and testing on accessible token options is currently in progress.

How do I get more help?

For assistance, questions, or accessibility feedback, contact the DoIT Help Desk at (608) 264-4357 or email help@doit.wisc.edu. For more information regarding Duo Security product accessibility see Duo Security vendor accessibility information.




Keywords:multi-factor authentication usability access disability tactile blind mfa token hard of hearing assistive technology low vision low-vision motor impairment dexterity fob keyfob auditory cognitive   Doc ID:88623
Owner:Lisa B.Group:Multi-Factor Authentication (MFA)
Created:2018-12-20 13:36 CSTUpdated:2019-01-09 10:59 CST
Sites:DoIT Help Desk, DoIT Tech Store, Multi-Factor Authentication (MFA)
Feedback:  0   0