5/5 – Duo to block authentication in countries or regions subject to OFAC sanctions
What is happening Heading link
In order to comply with U.S. regulations, beginning Thursday, May 5, 2022, the University’s 2-Factor Authentication (2FA) tool, Duo, will begin blocking authentications from users whose IP address originates in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control (OFAC).
What it means to UIC Community Heading link
University of Illinois Chicago affiliates attempting to authenticate to Duo-protected applications from the following OFAC-regulated countries or regions listed below will be blocked from completing their login and will receive an error message:
- Crimea region
- Cuba
- Donetsk region
- Iran
- Luhansk region
- North Korea
- Sevastopol region
- Sudan
- Syria
This restriction is based on location, not identity, and applies to all methods of Duo authentication, including the Duo mobile app, SMS text messages, phone calls, and physical tokens.
This means that University of Illinois Chicago affiliates based in, or traveling to, these countries or regions will not be able to access Duo-protected applications, which includes UIC Exchange email, Box, Qualtrics, the UIC VPN, U of I Administrative Systems (e.g. Banner), and others. As noted above, individuals are also unable to access Zoom, and other providers may follow suit at any time.
Traveling Internationally Heading link
Anyone planning to travel internationally for any reason should review I will be traveling internationally. Will I have access to university resources while abroad? to learn more about what university technology resources you may or may not be able to access while traveling to these counties and how to best work with the restrictions in place. As noted in the article, these restrictions are based on geopolitics and federal government regulations and can change without notice.
For those traveling to the above countries for UIC business, research, or personal reasons, it is important to contact the appropriate UIC office prior to travel. Many of these countries are subject to sanctions and approvals/licenses may be required.
- Faculty/Staff should contact the OVCR Export Controls Compliance Office at uicexport@uic.edu.
- Students should contact the Office of Global Engagement at oge@uic.edu.
If you have questions or concerns, please contact ithelp@uic.edu.