[NFBCS] A Different Kind of 2 Factor Authentication

Sat Aug 20 23:36:51 UTC 2022

Hi, agree with the comments below.  Microsoft and Google Authenticators are really good.  I’ll add in OKTA Verify, if you have not heard of OKTA they are one of the largest Identity providers for Enterprise SSO aka single sign on.  In the enterprise world there are a huge number of applications that integrate with Okta’s system.  The nice thing is then you’ll be able to login with a single username and password with the same simple Okta verify app which can automatically push a notice for Multi factor authentication right to your smartphone or watch if you are wearing it at the time.  

Okta also has a great webpage that your enterprise as they add applications will show them all on a screen in your favorite browser.  Finding an app and logging in is then very simple because Okta will take care of the login for you.  Finding apps is as simple as starting to type the app name into the search field which they put the cursor directly in and you can press Enter to automatically launch the first app in the list.  For example start typing J I R and press enter for me and I’m logged directly into Atlassian Cloud Jira.  

From what I’ve seen all the big ID Providers have invested the adequate or better effort into a good screen reader experience.  Once you are used to it, you will absolutely love it.

Best,
Charles

> On Aug 20, 2022, at 4:59 PM, Christopher Chaltain via NFBCS <nfbcs at nfbnet.org> wrote:
> 
> I've been using authenticator apps for a while. I generally use Microsoft Authenticator on my iPhone and Apple Watch. There's a Google Authenticator, but for Google, I think I just use the Google app itself. Facebook may also use int's own app for two factor authentication.
> 
> Quite a few places use two factor authentication, especially when you're logging in to see your account information. For some places it's required, like my office, but for other places it's something you want to opt in to, like Apple, Google, Microsoft, Facebook and so on. When setting it up, you can generally choose whether you want to use an app or have a code sent to your cell phone number or email address. I always choose an app if it's available because I find tapping on a button on my phone or watch to be easier than grabbing a four to six digit number from a text message and then copying it into an entry field in another app or on a web page. You can usually choose the app you'll use, and the most inaccessible part of the process is having the app read the CR code off of the computer screen. I always have trouble finding this code with my phone, so I either get sighted help, since it's just a one time thing, or I go down the manual route which requires typing in an insanely long code into your app.
> 
> --
> Christopher (AKA CJ)
> Chaltain at Outlook
> 
> -----Original Message-----
> From: NFBCS <nfbcs-bounces at nfbnet.org> On Behalf Of Amanda Lacy via NFBCS
> Sent: Saturday, August 20, 2022 4:48 PM
> To: NFB in Computer Science Mailing List <nfbcs at nfbnet.org>
> Cc: Amanda Lacy <lacy925 at gmail.com>
> Subject: Re: [NFBCS] A Different Kind of 2 Factor Authentication
> 
> Hi Peter,
> 
> My university (Texas A&M) uses Duo Mobile for two-factor authentication (https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fus%2Fapp%2Fduo-mobile%2Fid422663827&data=05%7C01%7C%7C355311871a7d4b71aff708da82f5f40c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637966290114489770%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ZezZVwUVkCKF1sg%2F5%2BaopbbJwRw3C5wcoPgEl4T4XXw%3D&reserved=0 <https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fus%2Fapp%2Fduo-mobile%2Fid422663827&data=05%7C01%7C%7C355311871a7d4b71aff708da82f5f40c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637966290114489770%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ZezZVwUVkCKF1sg%2F5%2BaopbbJwRw3C5wcoPgEl4T4XXw%3D&reserved=0>).
> 
> It works fine. In other words, I use it without thinking about it. I don't recall any setup issues. When I need to authenticate, I get a ping on my iPhone or Apple Watch, press Approve, and I'm done. I only wish my experience after logging in and authenticating was as smooth.
> 
>> On Aug 20, 2022, at 4:34 PM, Peter via NFBCS <nfbcs at nfbnet.org> wrote:
>> 
>> 
>> 
>> Good afternoon everyone,
>> 
>> 
>> 
>>               We recently learned of a newer form of Two Factor 
>> Authentication being implemented where
>> 
>> my wife Mary works. Traditionally when 2FA is used one is sent a 
>> verification code to the device of their
>> 
>> choice, usually a smartphone, which they must enter into a ffield on 
>> the app or Website's login screen to
>> 
>> gain access to the application or Website. In the new 2FA scheme being 
>> used by Mary's employer an app
>> 
>> is installed onto one's smartphone to approve the login. When the 
>> employee brings the login screen on
>> 
>> their computer they type in their crideidentials usually their 
>> password and are prompted to press OK to
>> 
>> move to the next step in the procedure. The employee must then hit the 
>> approve button in the app
>> 
>> installed on their smartphone to gain access to the application.
>> 
>> 
>> 
>>               We like this approach to 2FA as it saves one from 
>> having to wait to receive a verification code
>> 
>> and having to enter it into the login field on their screen. We're 
>> curious to know which companies use
>> 
>> this kind of Two Factor Authentication and if the apps work well with 
>> screen readers in this case
>> 
>> Voiceover.
>> 
>> 
>> 
>>               Mary told me that the IT folks where she works wanted 
>> to be sure this approach to 2FA would
>> 
>> work for her before installing the app on her iPhone. I told her that 
>> the best way to find out is simply to
>> 
>> try it. If anyone has had experience with this new form of 2FA we want 
>> to hear from you and will pass on
>> 
>> your encouragement to her IT folks so they can know that this system 
>> is being used successfully by other
>> 
>> blind folks and they need not worry about it not working out. Thanks 
>> for your help.
>> 
>> 
>> 
>> Peter Donahue
>> 
>> _______________________________________________
>> NFBCS mailing list
>> NFBCS at nfbnet.org
>> https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fnfbne
>> t.org%2Fmailman%2Flistinfo%2Fnfbcs_nfbnet.org&data=05%7C01%7C%7C35
>> 5311871a7d4b71aff708da82f5f40c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%
>> 7C0%7C637966290114489770%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiL
>> CJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdat
>> a=DoxvF7zdYnbBqv%2BSqnXeoLbqw4EkTfTyf2nGTDZCVAM%3D&reserved=0
>> To unsubscribe, change your list options or get your account info for NFBCS:
>> https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fnfbne
>> t.org%2Fmailman%2Foptions%2Fnfbcs_nfbnet.org%2Flacy925%2540gmail.com&a
>> mp;data=05%7C01%7C%7C355311871a7d4b71aff708da82f5f40c%7C84df9e7fe9f640
>> afb435aaaaaaaaaaaa%7C1%7C0%7C637966290114489770%7CUnknown%7CTWFpbGZsb3
>> d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7
>> C3000%7C%7C%7C&sdata=Sctpw%2FZNpwrrKegcLgggG%2FjtEnSicGNGJpwPjEgWp
>> yM%3D&reserved=0
> 
> _______________________________________________
> NFBCS mailing list
> NFBCS at nfbnet.org
> https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fnfbnet.org%2Fmailman%2Flistinfo%2Fnfbcs_nfbnet.org&data=05%7C01%7C%7C355311871a7d4b71aff708da82f5f40c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637966290114489770%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=DoxvF7zdYnbBqv%2BSqnXeoLbqw4EkTfTyf2nGTDZCVAM%3D&reserved=0
> To unsubscribe, change your list options or get your account info for NFBCS:
> https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fnfbnet.org%2Fmailman%2Foptions%2Fnfbcs_nfbnet.org%2Fchaltain%2540outlook.com&data=05%7C01%7C%7C355311871a7d4b71aff708da82f5f40c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637966290114489770%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=2mVmQttJ7Wgju%2FhrEDSYtgW4flDkJBGp%2BPd%2F2jxa8Ko%3D&reserved=0
> 
> _______________________________________________
> NFBCS mailing list
> NFBCS at nfbnet.org
> http://nfbnet.org/mailman/listinfo/nfbcs_nfbnet.org
> To unsubscribe, change your list options or get your account info for NFBCS:
> http://nfbnet.org/mailman/options/nfbcs_nfbnet.org/charles.vanek%40gmail.com