Duo to block authentications in countries or regions subject to OFAC sanctions

April 28, 2022

Beginning May 5, 2022, the University’s two-step verification tool, Duo, will begin blocking authentications from users whose IP address originates in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control (OFAC). Harvard affiliates attempting to authenticate to HarvardKey- and Duo-protected applications from the following OFAC-regulated countries or regions will be blocked from completing their login and will receive an error message:

  • Cuba
  • North Korea
  • Iran
  • Sudan
  • Syria
  • Crimea region
  • Sevastopol region
  • Donetsk region
  • Luhansk region

This means that Harvard affiliates based in or travelling to these countries or regions will not be able to access or communicate via most University-provided technology resources.

Due to University security requirements, there are no recommended alternatives to HarvardKey-protected applications. If you have questions or concerns, please contact ithelp@harvard.edu.