1871065 - [DUO] Update BMO to move away from the deprecated iframe Duo prompt to the suggested Duo Universal Prompt by March 30th, 2024

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: General, enhancement)

Description

[David Lawrence [:dkl]]

Support for the traditional Duo Prompt experience and Duo Prompt delivery via iframe ends on March 30, 2024 for most applications.

Duo's next-generation authentication experience, the Universal Prompt, provides a simplified and accessible Duo login experience for web-based applications, offering a redesigned visual interface with security and usability enhancements.

https://duo.com/docs/universal-prompt-update-guide#traditional-prompt-end-of-support

1. Update the application to support the Universal Prompt. This may involve installing a software upgrade provided by Duo or one of our technology partners on your application server, or making a configuration change in the admin console of a cloud-hosted application where you use Duo. Duo and our partners are working to make more application updates available.
2. Authenticate with Duo 2FA using the updated application so that Duo makes the Universal Prompt activation setting available in the Admin Panel.
3. From the Duo Admin Panel, enable the Universal Prompt experience for users of that application after the application has been updated with Universal Prompt support.

Comment 1

[John B [:johnb]]

\o Poking my head in here since my team now owns managing the Duo instance I believe Bugzilla utilizes. Do you all need any assistance moving this along?

Comment 2

[David Lawrence [:dkl]]

(In reply to John B [:johnb] from comment #1)

\o Poking my head in here since my team now owns managing the Duo instance I believe Bugzilla utilizes. Do you all need any assistance moving this along?

I am in the implementation stage currently but when ready to test I may have some questions for you. According to the docs, we can just reuse the keys we already have so if all goes well it should just work. But thanks for the offer.

Comment 3

[John B [:johnb]]

Correct. You should be able to reuse the keys from the Traditional to the Universal Prompt. If you do get to the point where you all need another pair of hands, let us know... we can send someone your way as needed.

Comment 4

[Jake Watkins [:dividehex]]

:dkl, Let me know if you have any questions or need any guidance here. Also, feel free to reach out directly via slack if you need a Duo admin to make changes on Duo's side. We can set up a new Duo application with it's own credentials for testing purposes.

Comment 5

[John B [:johnb]]

Just touching base to see how it is going. Let us know if you need any help. :)

Comment 6

[David Lawrence [:dkl]]

(In reply to John B [:johnb] from comment #5)

Just touching base to see how it is going. Let us know if you need any help. :)

Slow but steady. Just working through a couple challenges with integrating automated testing in our CI environment but I am close to being ready for review.

Comment 7

[BMO Github Automation]

Attachment: [mozilla-bteam/bmo] Bug 1871065 - [DUO] Update BMO to move away from the deprecated iframe Duo prompt to the suggested Duo Universal Prompt (#2202)

Comment 8

[David Lawrence [:dkl]]

Merged and live in production.
https://github.com/mozilla-bteam/bmo/commit/d7ca4b54b9828a56d3338505d0f085345be1b1e9