Duo Two-Factor Authentication (2FA) works as expected with keys and keyboard shortcuts such as Tab and Shift + Tab for navigating through elements, Up and Down Arrows for engaging with text, the Space Bar for selecting actionable elements, or Enter for activating links.
Recommendation for users who are blind: When you enroll in Duo 2FA, set Call Me as your default authentication option. You can also modify your preferences after enrollment by signing in to the Odin Account Manager at oam.pdx.edu and selecting Manage Duo Settings.
Keyboard Accessible Directions for Duo Enrollment
Navigate to oam.pdx.edu and select the Sign In link with your Enter key.
In the Single Sign-On window, type your Odin username in the Username form field.
Tab forward and type your Odin password in the Password form field.
Press Enter to sign in.
You will be redirected to Duo 2FA authentication setup.
Select and activate the Start setup button.
You will be asked, "What type of device are you adding?"
Tab forward to select the Mobile phone radio button.
Select and activate the Phone Number button.
You will be asked to "Enter your phone number."In the Country combo box, select the country associated with your mobile phones.
You may be automatically directed to the Phone number form field, if this is the case, tab backward (using shift + tab) to access the Country combo box.
In the Phone number form field, enter your 10-digit phone number.
Select and activate the “Is this the correct number?” checkbox
Select and activate the Continue button.
You will be asked, “What type of phone is your mobile phone?”
Tab forward and select the radio button that best describes your phone.
Select and activate the Continue button.
You will be asked to “Install Duo Mobile”
Follow the provided instructions to install Duo Mobile
Select and activate the I have Duo Mobile installed button
You will be asked to “Activate Duo Mobile,” select and activate the Email Me an activation link instead link.
Enter your email into the Email form field and select Send Email
Open your email account on your mobile device and navigate to the email sent by no-reply@duosecurity.com.
Select and activate the link in the email
The link will direct you to the Account Creation screen in your Duo Mobile app.
Enter an account name and select and activate the Save button
Return to the Activate Duo Mobile tab in your browser
Select and activate the Continue button
Tab forward to the When I log in combo box, select Automatically call this device.
Select and activate the Save button.
Select and activate the Continue to Login button.
At this point, you will receive your first test Duo notification via phone call.
Follow verbal directions by pressing any key on your phone to sign in.
Keyboard Accessible Directions for Duo 2FA Authentication
To authenticate with Duo 2FA using a screen reader or keyboard only, it is recommended that you set your default mobile Duo authentication method to Call Me rather than Send Me a Push or Enter a Passcode. Alternatively, you may use a YubiKey.
In the Single Sign-On window, type your Odin username in the username form field.
Type your Odin password in the password form field.
Press Enter to initiate Duo authentication.
If your Duo settings are set to Call me, you will receive a call on your mobile device.Follow verbal directions by pressing any key on your phone to sign in.
Further Resources
Visit the http://Duo.com website article Accessibility and Duo for additional information.