Re: MFA- Students during exams

["Menne, Michael S" <000002306ce3cd04-dmarc-request () LISTSERV EDUCAUSE EDU>]

At the moment, MFA is not required for our LMS.  If it were, I would not do anything special for MFA during exams. MFA 
is only needed to get logged into the platform. It is not required for continued use during the exam.  I’d communicate 
with Faculty that students need their mobile devices or whatever they are using to access the exam.  Faculty can give 
an extra two minutes at the beginning of the exam time to allow students to get logged in.

Michael Menne, CISSP
Chief Information Security Officer
IT Solutions Information Security
Minnesota State University, Mankato
Phone:  (507) 389-5705
Cell: (507) 405-0717
https://mankato.mnsu.edu/cyberaware

[signature_1175170199]

Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Curt Kappenman 
<ckappenman () ANDERSONUNIVERSITY EDU>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Tuesday, April 20, 2021 at 6:50 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] MFA- Students during exams

You could make a conditional access policy, just for exam time if necessary, that would allow any authentication from 
the campus network to bypass the MFA requirement.  You can do it for everything or just for the applications you need 
it for.  Once exam time is over, turn it off.
Curt Kappenman
Anderson University
Anderson, SC

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Uday Kiran
Sent: Tuesday, April 20, 2021 4:16 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] MFA- Students during exams

Friends, while implementing the MFA for students using Microsoft MFA, how the students can access the MFA during exams? 
Because mobiles are not permitted while attempting the exam.

Any ideas?

Regards,

Uday Kiran
Snr Spl – Information Security
Office of Dir. Digital Technologies
اوداي كيران
أخصائي أول - أمن المعلومات
تكنولوجيا المعلومات
[Image removed by sender. Main logo]
Direct.: 9712 206 1182
Mobile: +971 56 501 1182
Email: ukiran () hct ac ae<mailto:ukiran () hct ac ae>
P.O.Box: 25026, Abu Dhabi, United Arab Emirates
www.hct.ac.ae<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hct.ac.ae%2F&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110524183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=3nVthN%2Fcp0LNL4KfMy4y2twaBRV5%2BoNTy9XfRg46%2BYs%3D&reserved=0>
[Image removed by sender. 
Facebook]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fhctuae&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110524183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=nUr9ZdC0aEZnUe5J5mlrhGzVg2PB3ym3EI1ARfSIbQY%3D&reserved=0>
[Image removed by sender. 
Twitter]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FHCT_UAE&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110534137%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6%2B2jF70yn3OIpICneY1X6KIfRaMZFcgmCfTZRPQkpBk%3D&reserved=0>
[Image removed by sender. 
Instagram]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2FHCT_UAE%2F&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110534137%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=fb%2Bxkkb0MimnMcPK4g%2F4HhX%2Faqv3g%2FWxcuQyQWBSUL4%3D&reserved=0>
[Image removed by sender. 
YouTube]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fuser%2Fhctuae&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110534137%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=gL0KDJA0dXo%2FxMfr1MyeOoKkQcTdKUHpKlVv4hLiwN4%3D&reserved=0>

[Image removed by sender.]
[Image removed by sender. Enviromental] Please consider the environment before printing this email
This Email and any attachments may contain HCT confidential and privileged information.If you are not the intended 
recipient, please notify the sender immediately by return email, delete this email and destroy any copies. Any 
dissemination or use of this information by a person other than the intended recipient is unauthorized and may be 
illegal. Unless otherwise stated, opinions expressed in this email are those of the author and are not endorsed by the 
author's employer.



Uday Kiran
Senior Specialist - Information Security
Office of Dir. Digital Technologies
اوداي كيران
أخصائي أول - أمن المعلومات
تكنولوجيا المعلومات
[Image removed by sender. Main logo]
Direct.: 9712 206 1182
Mobile: +971 56 501 1182
Email: ukiran () hct ac ae<mailto:ukiran () hct ac ae>
P.O.Box: 25026, Abu Dhabi, United Arab Emirates
www.hct.ac.ae<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hct.ac.ae%2F&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110544097%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=YBdggRzfUbDLVzdOizTlVoABk5JLon6GMbdkL9EJYTs%3D&reserved=0>
[Image removed by sender. 
Facebook]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fhctuae&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110544097%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=CtdfXQXp6dFHAxrGpBxl37UenGGzyOCTbfnUppNHbaA%3D&reserved=0>
[Image removed by sender. 
Twitter]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FHCT_UAE&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110554050%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Nw9sj5kIkD4lV%2Baq631lAkWcNwmpeS84wVuN8ZWHaPg%3D&reserved=0>
[Image removed by sender. 
Instagram]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2FHCT_UAE%2F&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110554050%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=qgrl6AxE432IO8Wav9FkHKhRP22lAjl7hBdtQvRx1OE%3D&reserved=0>
[Image removed by sender. 
YouTube]<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fuser%2Fhctuae&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110564003%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=ADKVxgREI6yuh3g2Q0%2FZahn0BVMuqSRffd8RCoRsvwY%3D&reserved=0>

[Image removed by sender.]
[Image removed by sender. Enviromental] Please consider the environment before printing this email
This Email and any attachments may contain HCT confidential and privileged information.If you are not the intended 
recipient, please notify the sender immediately by return email, delete this email and destroy any copies. Any 
dissemination or use of this information by a person other than the intended recipient is unauthorized and may be 
illegal. Unless otherwise stated, opinions expressed in this email are those of the author and are not endorsed by the 
author's employer.

________________________________

The information in this email and any attachments are confidential and solely for the use of the individual or entity 
to whom it is addressed to and authorized to receive it. If you are not the intended recipient, be advised that you 
have received this email in error and that any use, disclosure, copying, distribution or taking any action in reliance 
on the content of this information is strictly prohibited and may be unlawful. If you have received this email in 
error, please delete along with any attachments and inform the Higher Colleges of Technology immediately at disclaimer 
() hct ac ae<mailto:disclaimer () hct ac ae>. We do not guarantee the integrity of any emails or attachments and are 
not responsible for any changes made to them by any other person.

تعتبر المعلومات الواردة في هذا البريد الإلكتروني وأياً من مرفقاته سرية وتخص المستلم المعني أو الاشخاص المصرح لهم 
باستلامه، فإذا لم تكن المستلم المقصود، فيرجى العلم بأنك قد استلمت هذا البريد الإلكتروني عن طريق الخطأ ويمنع منعاً باتاً 
الاستفادة منه أو افشاء محتواه أو توزيعه. وفي حال استلام بريد إلكتروني عن طريق الخطأ، يرجى حذفه مع مرفقاته وإخطار كليات 
التقنية العليا فوراً على البريد الإلكتروني التالي: disclaimer () hct ac ae<mailto:disclaimer () hct ac ae>. كما أننا لا 
نضمن سلامة أي بريد إلكتروني أو مرفقاته، ولسنا مسؤولين عن أية تعديلات عليها من قبل أي شخص آخر.

________________________________

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110564003%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=8YF5vT0P3B%2FK8uxfiaPRFnwgNTets5UwcW0%2BQ8dVD%2F4%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C0f739819fada41dce44508d903f27213%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637545162110564003%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=8YF5vT0P3B%2FK8uxfiaPRFnwgNTets5UwcW0%2BQ8dVD%2F4%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community