[CITL] Important Updates on the CAS/Shib and DUO Universal Prompt Upgrades

[Süreyya Tuncel]

Dear Colleagues,

I am writing to share important updates and reminders about the upcoming
CAS/Shib upgrade and DUO Universal Prompt switch.
Go-Live Schedule

   -

   CAS/Shib upgrade: February 25, 2024
   -

   DUO Universal Prompt: March 25, 2024

CAS/Shib Upgrade - Important Updates

   -

   Cross-Origin Resource Sharing (CORS) (such as using iframe) is not
   supported in the new version of CAS. We strongly recommend that you
   thoroughly test applications in your portfolio, identify those that use
   CORS, and report any issues to us ASAP. It is best practice to utilize a
   redirect for the authentication instead of embedding the CAS login page. We
   are happy to work with you on identifying possible remediation paths.
   -

   Gmail and Google Workspace client applications may require users to
   re-authenticate when they access their account for the first time after the
   CAS/Shib upgrade.

DUO Universal Prompt Switch

Our multi-factor authentication vendor, DUO, is transitioning to its new
Universal Prompt starting on March 25, 2024. To ensure a smooth transition,
we have been working to upgrade our Central Authentication Service (CAS)
and Shibboleth (Shib) environments for compatibility with the Universal
Prompt.

As a part of this transition, there will be changes in the MFA user
experience. These changes are documented in ITS’ DUO Universal Prompt
announcement <https://its.ucr.edu/blog/duo-universal-prompt-2024> and in
this short how-to video <https://www.youtube.com/watch?v=uJ67rYwVrzA>,
which I encourage you to share with your respective organizations.

We appreciate your understanding as we work to upgrade our systems and
implement the DUO Universal Prompt. Please do not hesitate to contact me if
you have any questions or concerns.


Thank you,



*Sureyya Tuncel*



Manager, Identity and Access Management

Information Technology Solutions - Information Security Office

University of California, Riverside

*(*  (951) 827-1235| *** sureyya.tuncel at ucr.edu

Web <https://its.ucr.edu/> | Twitter <https://twitter.com/IT4UCR> |
Instagram <https://www.instagram.com/it4ucr/>

 Pronouns: she/her <https://www.mypronouns.org/she-her>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucr.edu/pipermail/citl/attachments/20240206/02ce7aa9/attachment.html>