Duo Two-Factor Authentication (2FA) works as expected with keys and keyboard shortcuts such as Tab and Shift + Tab for navigating through elements, Up and Down Arrows for engaging with text, the Space Bar for selecting actionable elements, or Enter for activating links.
Recommendation for users who are blind: When you enroll in Duo 2FA, set Call Me as your default authentication option. You can also modify your preferences after enrollment by signing in to the Odin Account Manager at oam.pdx.edu and selecting Manage Duo Settings.
Keyboard Accessible Directions for Duo Enrollment
Navigate to oam.pdx.edu and select the Sign In link with your Enter key.
In the Single Sign-On window, type your Odin username in the Username form field.
Tab forward and type your Odin password in the Password form field.
Press Enter to sign in.
You will be redirected to Duo 2FA authentication setup.
Select and activate the Start setup button.
You will be asked, "What type of device are you adding?"
Tab forward to select the Mobile phone radio button.
Select and activate the Continue button.
You will be asked to "Enter your phone number."In the Country combo box, select the country associated with your mobile phones.
In the Phone number form field, enter your 10-digit phone number.
Use your Space Bar to check the box confirming that the number you entered is correct.
Select and activate the Continue button.
You will be asked to "Verify Ownership" of the mobile number you entered.Select and activate the button titled 1. We can call or text you with a verification code. Call me button.
You will receive a call immediately where you will hear a 6-digit verification code. This verification code will be repeated twice.Type the verification code in the form field titled 2. Enter your six-digit code: verification code Edit.
Select and activate the button titled 2. Enter your six-digit code: Verify Button.
Select and activate the Continue button.
You will be redirected to "My Settings & Devices."In the When I log in combo box, select Automatically call this device.
Select and activate the Continue button.
At this point, you will receive your first test Duo notification via phone call.Follow verbal directions by pressing 5 on your phone to sign in.
Keyboard Accessible Directions for Duo 2FA Authentication
To authenticate with Duo 2FA using a screen reader or keyboard only, it is recommended that you set your default mobile Duo authentication method to Call Me rather than Send Me a Push or Enter a Passcode. Alternatively, you may use a YubiKey.
In the Single Sign-On window, type your Odin username in the username form field.
Type your Odin password in the password form field.
Press Enter to initiate Duo authentication.
If your Duo settings are set to Call me, you will receive a call on your mobile device.Follow verbal directions by pressing 5 on your phone to sign in.
Further Resources
Visit the http://Duo.com website article Accessibility and Duo for additional information.