It wasn't my choice to use Duo. In fact, I'm completely against it. I think it's throwing good money down the toilet. But you all know how it is. Someone sees a shiny new toy in some powerpoint presentation and suddenly it's the best thing in the world. In my opinion, it would have made much more sense to use the 2FA in Azure active directory. Also, we're using Shibboleth for IdP so we could have completely standardised on the very popular Azure AD cloud platform. We even have all of our users and devices in Azure AD and our devices are even co-managed with Intune and MEM. So this decision to use Duo is absolutely bananas to be completely honest with you. But, sometimes, it's easier to just go with the tide. And quietly mumble about how utterly stupid this waste of money is. A really smart man said something to me over ten years ago. He said that when making decisions about how to lead a company, be it something small like picking a stationary supply provider or choosing a new SAN, always think to yourself, what if this was my company. Or. What if this was my money that I was spending. Sadly, no one in large enterprises considers this. They see their budget and the potential to have that increased without really thinking of the bigger picture of where the money ultimately needs to come from. Sorry for the rant. I'm rather unimpressed with the direction my employer is going at the moment. It's leaving me in rather a bad mood. -----Original Message----- From: Andrew Hodgson <andrew@hodgson.io> Sent: Wednesday 19 February 2020 21:20 To: Blind sysadmins list <blind-sysadmins@lists.hodgsonfamily.org> Subject: [Blind-sysadmins] Re: Duo is fully accessible. Hi, Thanks for the heads up. Just interesting in why you chose a third-party solution? A lot of businesses I know are throwing away their 2FA systems and using Azure AD auth for everything, using the 2FA provided as part of the login. Andrew. -----Original Message----- From: Darragh Ó Héiligh <d@digitaldarragh.com> Sent: 19 February 2020 20:34 To: Blind sysadmins list <blind-sysadmins@lists.hodgsonfamily.org> Subject: [Blind-sysadmins] Duo is fully accessible. Hello, Just a note to anyone looking at implementing two factor authentication for their organization, The duo administration website is fully accessible. I don't know if this is something they set out to do but I have had absolutely no problems fully configuring complex policies and applications using Duo. Also their documentation is nicely formatted and is generally written very clearly. So, if you're considering 2FA or MFA, from an accessibility perspective, I think Duo deserves some consideration. Regards Darragh Ó Héiligh Performing, Promoting and Sharing traditional Irish music Performance: www.darraghpipes.ie<http://www.darraghpipes.ie> Music at the Gate: www.musicatthegate.ie<http://www.musicatthegate.ie> Ceol FM: www.ceol.fm<http://www.ceol.fm> Tel: 00353(0)877670464 Email: darragh@ceol.fm _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org