As part of the Duo Universal Prompt rollout on November 14, 2023, the UI for all parts of the end-user login experience will be completely updated. It is unlikely that any programmatic integrations for PennKey login that rely on the current UI’s look, feel, or behavior will continue to work without reconfiguration. Application developers and owners who suspect their existing integrations will break are encouraged to leverage the new Enhanced Client or Proxy (ECP)-based programmatic login interface supported by PennKey.
Who Is Affected?
Penn software developers and maintainers of PennKey-enabled applications that rely on automated “Screen-scrape”-style PennKey authentication (automation or scripts in place for PennKey SSO).
What is ECP?
Enhanced Client or Proxy (ECP) is SAML authentication designed for clients that are not browsers, such as: desktop apps or server-side code running in a web app (e.g., Python code/script, certain phone apps, command-line interface). Benefits include:
- Maintainability
- No impact to your user interface if there are modifications to PennKey SSO
- Can use third-party/standard apps
Timing
ECP is available immediately and is currently optional to use. When Duo Universal Prompt and the PennKey Login UI Refresh are rolled out to campus on November 14, 2023, ECP will be required for non-browser PennKey SSO.
Using ECP
Technical documentation is available:
More Information
If you have questions or need more information, please contact help@isc.upenn.edu.