HarvardKey Release Notes

HarvardKey Self-service 3.7.0, and HarvardKey Authentication 3.6.0, released on April 23, 2017, deprecate PIN authentication. The HUID/eCommons tab no longer appears when claiming on key.harvard.edu - users needing to claim a HarvardKey should go though the "New to Harvard" or "Alumni" paths. The HUID tab no longer appears when logging in to applications. One-way federation has been removed, which means the eCommons tab no longer appears when logging in to most University applications. Users should log in with the HarvardKey tab.

Previous HarvardKey Releases

Expand the items below for full release notes for previous HarvardKey releases.

HarvardKey Self-service 3.6.3 - 4/9/17

HarvardKey Self-service 3.6.3, released on April 9, 2017, includes an update to the address in the footer of emails generated from the system; saves provided login names in lowercase to prevent any issues with other systems; and added logic to better support Duo device management based on the user's Duo status.

HarvardKey Authentication 3.5.2 - 4/9/17

HarvardKey Authentication 3.5.2, released on April 9, 2017, includes back-end changes regarding the processing of Duo enrollments.

HarvardKey Self-service 3.6 - 2/2/17

HarvardKey Self-service 3.6, released on February 2, 1017, includes improved error handling. Several errors which were all grouped under "500" have been broken out and will display more specific information now.

HarvardKey Authentication 3.5.1 - 3/12/17

HarvardKey Authentication 3.5.1, released on March 12, 2017, includes an enhancement so that users can sign into Duo multifactor authentication when they are using Dragon Naturally Speaking software. It also includes a fix to remove dependencies on the Aurora database, so that if that database goes down it doesn't affect Authentication. It also fixes minor display issues on the HarvardKey login page.

HarvardKey 3.5 - 12/14/16

 

HarvardKey 3.5, released on December 14, 2016, includes further support for when users' two-step verification accounts are locked out; email notifications when adding or removing devices for two-step verification; and better notification when completing enrollment in two-step verification. 

New or Enhanced Functionality:

  • When a user's two-step verification (Duo) account has been locked and then attempts to log in, he or she is gracefully informed and provided with guidance to resolve
  • Send email notification to user after successfully adding a new two-step verification device
  • Send email notification to user after removing an existing two-step verification device
  • On-screen success notification shown when enrollment is completed

Known Gaps and Remediation Steps:

  • Texts sent to international numbers are not received in some cases

 

<embed>
Copy and paste this code to your website.
Copy and paste this code to your website.

HarvardKey 3.4 - 11/17/16

HarvardKey 3.4, released on November 17, 2016, provides support for international numbers in two-step verification, displays the smartphone OS when adding/removing devices, and extends browser support in IE.

New or Enhanced Functionality:

  • Accept International phone numbers
  • Display Smartphone OS platform when viewing or removing Duo 2SV managed devices
  • Add additional IE compatibility tags to support custom browsers

 

HarvardKey 3.3 - 11/3/16

HarvardKey 3.3 integrates two-step verification enrollment at the end of the HarvardKey claiming process. In addition to streamlining the process, verbiage has been updated to be more succinct and informative.  

New or Enhanced Functionality:

  • At the end of the HarvardKey claiming process, the user is directed to the workflow for enrolling in two-step verification
  • Removed extraneous verbiage on Duo two-step informational pages
  • Bug fixes: landline extension works properly, updated responsive view on mobile devices, added new error code for troubleshooting

HarvardKey 3.2 - 10/20/16

HarvardKey 3.2 provided minor bug fixes.

New or Enhanced Functionality:

  • Enhancements have been put in place to fine tune the HarvardKey self-service processes to prevent duplicate login names being used.   Some other minor bugs were fixed as well. This release contains no noticeable/visual updates.

Known Gaps and Remediation Steps:

  • In order to pass the two-step validation requirement, all users must claim and use their HarvardKey.  This requirement impacts users that continue to attempt to authenticate via their HUID/PIN password.  They will need to claim their HarvardKey to use 2SV.
  • You cannot add an international phone number from within HarvardKey self-service yet. Instructions for that process are available here http://huit.harvard.edu/twostep/international

 

HarvardKey 3.1 - 9/22/16

HarvardKey 3.1 provided enhancements to the two-step verification (2SV) functionality in anticipation for the use of 2SV becoming required for all HarvardKey users in the next few months.  Please visit http://huit.harvard.edu/twostep/schedule for details of when 2SV will be required for your population.

New or Enhanced Functionality:

  • Phone numbers must now be validated - a confirm input field has been introduced (in a similar fashion to entering a password).
  • Many text changes have been throughout the 2SV pages of HarvardKey aimed at further clarifying user instructions - based on feedback gathered during ongoing user acceptance testing.  [Thanks to all those who have participated!]
  • Enhancements were made to the API used to integrate with Duo.
  • A new 'Temporarily Out of Service' page was created that will be displayed during scheduled maintenance.
  • Minor bug fixes were also done.

Known Gaps and Remediation Steps:

  • In order to pass the two-step validation requirement, all users must claim and use their HarvardKey.  This requirement impacts users that continue to attempt to authenticate via their HUID/PIN password.  They will need to claim their HarvardKey to use 2SV.
  • You cannot add an international phone number from within HarvardKey self-service yet. Instructions for that process are available here http://huit.harvard.edu/twostep/international

 

HarvardKey 3.0 - 9/10/16

HarvardKey version 3.0 provided enhancements to two-step verification with HarvardKey functionality. The user experience for activating two-step verification has been moved entirely to within the HarvardKey self-service application (when previously it was done via Duo application). The ability to manage (add or remove) the devices you have registered for two-step verification is also included within HarvardKey self-service.

New or Enhanced Functionality

  • Activation of 2SV is easier since it occurs automatically after the first device is registered.
  • From the Manage Devices page you can add additional devices or remove any device.
  • Additional back-end work on the system for event-capture and logging has been completed.

Known Issues and Remediation Steps

  • Upon removal of a device that was just added, user is asked to login using two-step verification with that device.  [To be fixed in future release]
  • You cannot add an international phone number from within HarvardKey self-service yet. Instructions for that process are available here http://huit.harvard.edu/twostep/international

HarvardKey 2.6 - 7/16/16

HarvardKey version 2.6 provides enhancements to the Duo two-step verification functionality. As two-step verification with your HarvardKey becomes required for more applications and populations, the user experience for activating two-step verification becomes easier. For more information on activating Duo two-step verification,review the set up instructions.

New or Enhanced Functionality

  • The HarvardKey Home Page has an additional link to allow direct access to ‘Manage Your Two-Step Verification’ (from within the Manage Your Account & Services box)

  • Also, we have consolidated the management of Duo two-step verification (D2SV) to one page within HarvardKey Self-Service.  On that page you can both enroll in and activate D2SV.  Also there is a new display listing all of your currently enrolled D2SV devices (mobile phones, landlines, tablets, tokens, etc.)

Known Gaps and Remediation Steps

  • None

HarvardKey 2.5 - 6/30/16

The HarvardKey 2.5 Release contains items aimed at improving the user experience during the HarvardKey claiming process, as well as improved reporting and auditing capabilities.

Enhanced user experience during HarvardKey claiming process

  • The order of the tabs in the Claiming area (of HarvardKey Self-Service) was adjusted to reflect the groups who are most using this process.  The order is now: "New to HarvardKey", "Alumni", then "Current Pin Holder" last.
  • For new FAS-affiliated users who choose an email address as part of claiming their HarvardKey, two additional options have been added. This means the total is now fourteen options. In the list, the second choice will be in the form of firstnamelastname@domain* and the last choice in the list will always be NetID@domain*Note: in the event that the firstnamelastname@domain option has is already in use, a number will be appended to the end (firstnamelastname2@domain).
  • Further consistency in the text of the error messages has been added as well as work to clarify error messages displayed while creating a new password.
  • The significance of successfully completing the claiming process has been emphasized by ensuring the term "Congratulations" stands out on its own line, and the phrase "Ready to use" has been underlined in the email notification sent. (Thank you to the HUIT Service Desk for this suggestion!)
  • The Login Name will automatically be pulled in for anyone who already has an active Official Email Address in any of the Harvard-managed email domains (saving one step for them within the claiming process).

Improved reporting and auditing capabilities

  • As part of an ongoing effort to consolidate reporting and auditing capabilities, all events generated during the authentication process are now being stored in Splunk.

Known Defects

  • None