多重身份验证：新的 Duo 界面¶

当需要用户使用多重身份验证 (MFA) 登录到 Snowflake 时，其将使用 Duo 注册并使用 MFA 进行身份验证。启用此行为变更捆绑包后，Duo 注册和身份验证体验将发生变化。

Before the change:

传统的 Duo Prompt 界面在注册和身份验证期间显示。

After the change:

The new Duo Universal Prompt interface appears during enrollment and authentication. For a description of the new interface, see What are the differences between the traditional Duo Prompt and the Universal Prompt? (https://help.duo.com/s/article/7118).

在大多数情况下，此变更不需要对环境进行任何修改。但是，如果以下任一情况属实，您可能需要配置环境：

• If your account name contains an underscore and you use private connectivity, you need to add a DNS entry that includes a dash instead of an underscore in the account URL. For example, if your account name is account_dev and your organization is myorg, then add an entry like myorg-account-dev.privatelink.snowflakecomputing.cn.
• If your corporate firewall or proxy blocks api-*.duosecurity.com, *.devicemanagement.duosecurity.com, or *.duosecurity.com:443, modify it to allow these values. Snowflake previously recommended allowing *.duosecurity.com:443.

参考：1875