Okta & Duo | Remember Me For 7 Days

When to Use?

This article describes how to use the remember me for 7 days functionality within Duo (Traditional and Universal) and Okta. Duo is updating its authentication prompt to the Duo Universal Prompt as a way to simplify the end-user experience. GVSU has enabled the new Duo Universal Prompt in Okta. There are still some legacy systems outside of Okta utilizing the Duo traditional prompt such as LastPass, RedCap, and Pulse Secure (also known as Ivanti Secure Access).

How often will Duo prompt me to authenticate?

• You will be prompted to use a multi-factor authentication every 7 days. Note: Pulse Secure also known as Ivanti secure access will prompt every time regardless.

• You will also be asked to re-authenticate when your password changes, expires, or you connect from a new device or browser.

How often will Duo prompt me to authenticate my email and other Microsoft 365 products?

• Please see our Duo MFA Email guide: https://services.gvsu.edu/TDClient/60/Portal/KB/ArticleDet?ID=7368
   

Why did I get asked to re-authenticated before my 7 days?

• International Travel
  • Export-restricted countries are subject to further limitations, and countries with tight export controls may block MFA products.
    • https://www.gvsu.edu/export/
• Microsoft Risky Sign-in
  • Microsoft can automatically block a sign-in attempt or require additional actions such as multi-factor authentication when it detects risks of many types, including:
    • Anonymous IP address use
    • Atypical travel (e.g., log in from unknown location, using a VPN, logged into several different geographic locations simultaneously)
    • Malware or suspicious IP address
    • Unfamiliar sign-in properties (e.g., new device type, new browser)
    • Leaked credentials (the username/password combination has been detected as reused/leaked on the dark web)
  • See Microsoft's article "What is Identity Protection" for more information.

Procedure

How to enable the remember me for 7 days using Duo Universal (Okta and Microsoft 365 services).

How to enable the remember me for 7 days using Duo Traditional.

How to enable the remember me for 7 days using other MFA authenticators inside of Okta (e.g. Okta Verify, Google Authentication, Authy).

Duo Universal - Remember Me for 7 Days

• When logging into a system utilizing the Duo Universal prompt, check the box saying "Trust browser" or select "Yes, trust browser".
• If the user clicks "No, do not trust browser," they will not be asked to trust the browser again for 14 days. If you choose this option, you will be prompted daily for MFA.
  
  

Duo Traditional - Remember Me for 7 Days

• When logging into a system utilizing the Duo Traditional prompt, check the box saying "Remember me for 7 days."
  
  
   

Okta - Remember Me for 7 Days

• Please go to the Duo Universal section above if you are using Duo as your multi-factor. Additionally, you must check the "Keep me signed in" box while logging into Okta.

  • Please note: Your MFA will be remembered using this for the remember timed.

•