Services are categorized into standard policy and enhanced policy.

Standard Policy Applications

If you are connected to a U of T network (excluding wifi and VPN connections), and the application is listed as a standard policy application you will not be prompted to authenticate with Duo and you can continue to access the application as usual.

If you are not connected to a U of T network and the application is listed as a standard policy application , you will only be prompted to authenticate with Duo once every 24 hours, if you decide to trust the device that is accessing the U of T application. Additionally, if you have not enrolled yourself into Duo, you will not be prompted for MFA.

All applications that use weblogin (except O365 and eToken protected services) have a standard policy.

Enhanced Policy Applications

If you are trying to access an enhanced policy application, you will be prompted to authenticate with Duo every single time you initially access the application and/or timed out. Additionally, if you are not enrolled in MFA, you will be denied access to the U of T Application.

The following applications are enhanced policy applications:

  • TBA