Issue/Question
Overview
Why am I seeing the message "Access denied. Duo Security does not provide services in your current location" in the DUO Prompt?
Environment
Resolution
Starting May 5, 2022
In order to comply with U.S. regulations, Duo blocks authentications from users whose IP address originates in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control.
Users attempting to authenticate to a Duo-protected application from an access device with an IP address originating in an OFAC-regulated country or region will be blocked from completing their login and receive an error message.
Web-based applications will display the following error message: “Access denied. Duo Security does not provide services in your current location.” Other applications may display a generic failed login message.
OFAC restrictions relevant to Duo currently apply to the following countries or regions:
- Cuba
- North Korea
- Iran
- Sudan
- Syria
- Crimea region
- Sevastopol region
- Donetsk region
- Luhansk region
If you are traveling to any of these areas during your break, you will not have access to any of our systems.
Is there an OFAC Exception process that DUO offers?
No, Duo is not legally able to offer any official exceptions to customers who wish to support multi-factor authentication in OFAC-restricted countries or regions. Duo is bound by U.S. economic and trade regulations as a U.S.-based company, which prohibit us from providing services in these locations.