Per Duo Security, March 1st, 2022:
In order to comply with U.S. regulations, Duo will begin blocking authentications from users whose IP address originates in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control.
Beginning May 5, 2022, users attempting to authenticate to a Duo-protected application from an access device with an IP address originating in an OFAC-regulated country or region will be blocked from completing their login and receive an error message. This change will roll out May 5 through 12 as part of Duo’s regular release process.
Web-based applications will display the following error message: “Access denied. Duo Security does not provide services in your current location.” Other applications may display a generic failed login message.
OFAC restrictions relevant to Duo currently apply to the following countries or regions:
- Cuba
- North Korea
- Iran
- Sudan
- Syria
- Crimea region
- Sevastopol region
- Donetsk region
- Luhansk region
Blocked authentications will appear in the Authentication Log as “Restricted OFAC location.”
If you have questions about OFAC restrictions or requesting an exception, please work directly with the Office of Foreign Assets Control.