MFA Location/Services (was Multifactor on campus)

["Wier, Timothy A." <tim.wier () CUCHICAGO EDU>]

I'd like to ask a quick follow-on poll to Jonathan's to understand where/what/how often you are requiring the MFA

Location: On-Campus/Off-Campus/Both
All services or just a subset: All/SIS/Email
How often are you requiring the 2nd factor: Every time/30 Day/One Time

If your policy differs based on access location I'd like how as well.

Thanks,

Tim Wier
Assistant VP for IT
Concordia University Chicago
Tim.Wier () cuchicago edu
708-209-3565

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Miller, Richard H.
Sent: Wednesday, January 8, 2020 1:37 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Multifactor on campus

alumni are provided a new account in a separate domain (upon request) when they graduate. It is not linked to their 
(old) e-mail account and they do not have access to
e-mail from when they were students/residents/fellows. (The e-mail may contain PHI and/or intellectual property).

emeriti are considered to be a type of faculty so they retain their account when they transition to emeritus status


[cid:image001.png@01D4E4AE.449FC1F0]<https://www.bcm.edu/>
RICHARD MILLER
NETWORK SECURITY ARCHITECT, NETWORK ENGINEERING & SECURITY
2450 Holcombe Blvd., OW203, Houston, TX 77030
T: 713.798.3532 | E: rick () bcm edu<mailto:rick () bcm edu> | W: www.bcm.edu<http://www.bcm.edu/>

For help, questions, or feedback, visit the IT Service Portal: https://it.bcm.edu<https://it.bcm.edu/>



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Kimmitt, Jonathan
Sent: Friday, January 3, 2020 11:06 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Multifactor on campus

***CAUTION:*** This email is not from a BCM Source. Only click links or open attachments you know are safe.
________________________________
That's a great point James....  I wasn't thinking about alumni or Emeritus, even though we are dealing with that issue 
as well... We have provided email for life for alumni and retirees since 2008, and we are having some issues with 
zombie accounts....

Thank you for adding that!

And thank you for everyone who has responded!

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Pardonek, Jim
Sent: Friday, January 3, 2020 10:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Multifactor on campus

Not to hijack this thread but could we include Alumni, retirees and emeriti (if you let them continue to use university 
email)

Students  Yes as of 5/1/2020
Faculty = Yes as of 5/1/2020
Staff = Yes as of 5/1/2020
Alumni = No if they opt in for email for life
Emeritus = Yes if they have access to more resources than email.
Guests = No


James Pardonek, MS, CISSP, CEH, GSNA
Information Security Officer
Loyola University Chicago
1032 W. Sheridan Road | Chicago, IL  60660

*: (773) 508-6086

Loyola University Chicago will never ask you for your username or password.
For the latest information security news at Loyola, please follow us online,
Twitter: @LUCUISO
Facebook: 
https://www.facebook.com/lucuiso/<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam04.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.facebook.com-252Flucuiso-252F-26data-3D02-257C01-257Cjonathan-2Dkimmitt-2540UTULSA.EDU-257C56cae395534540efa66608d7906e4a92-257Cd4ff013c62b74167924f5bd93e8202d3-257C0-257C0-257C637136675682231814-26sdata-3D1zxqxi2PuypC-252BLqimY8GpQsZ0qnQjInH1u7MMGGN2Ws-253D-26reserved-3D0&d=DwMFAg&c=ZQs-KZ8oxEw0p81sqgiaRA&r=2OsE44buE5NKkGGctYIwOw&m=G2mgSJL442V9XQjrWrgYzM9C5fV08Rtj1vPJ4IsifK4&s=KrgRKtIVjqeOgDyegUznkrX9u2fWh1-I0cJeEtPUyEQ&e=>
Our Blog 
http://blogs.luc.edu/uiso/<https://urldefense.proofpoint.com/v2/url?u=http-3A__blogs.luc.edu_uiso_&d=DwMFAg&c=ZQs-KZ8oxEw0p81sqgiaRA&r=2OsE44buE5NKkGGctYIwOw&m=G2mgSJL442V9XQjrWrgYzM9C5fV08Rtj1vPJ4IsifK4&s=SYEcdlIkyv10IFYixem9IWa1j1LpKH9K4Hd6eNrj1ZU&e=>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Telfer, Will
Sent: Friday, January 3, 2020 10:55 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Multifactor on campus

We have implemented multifactor on over 60 services used by faculty, staff, & students.

Students  Yes
Faculty = Yes
Staff = Yes
Guests = It depends (for the most part guests are either sponsored for wireless access by a current faculty/staff 
member or in the instance of consultants they are treated like a faculty/staff member so they are required to Duo into 
services)

Thank You,
Will Telfer, M.S.
Information Security Analyst
Information Technology Services

Follow BaylorITS & look for the #BearAware:
Twitter: @BaylorITS
Facebook: facebook.com/BaylorITS
Website: baylor.edu/BearAware

[BU_e-signature]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Kimmitt, Jonathan
Sent: Friday, January 3, 2020 10:48 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Multifactor on campus

Hi all,

I wanted to do a quick unofficial poll for who utilizes multifactor on campus.....  Any responses for or against are 
welcome!

Do you use multifactor for:

Students  Yes/No
Faculty = Yes/No
Staff = Yes/No
Guests = Yes/No

We have deployed Microsoft MFA for users who have access to our ERP, but are looking to expand to all employees and for 
more services.  Several Universities around the area have gone full MFA for all users.

Thanks all!

-Jonathan


~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743
jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa edu>




**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam04.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.educause.edu-252Fcommunity-26data-3D02-257C01-257Cjonathan-2Dkimmitt-2540UTULSA.EDU-257C56cae395534540efa66608d7906e4a92-257Cd4ff013c62b74167924f5bd93e8202d3-257C0-257C0-257C637136675682231814-26sdata-3DqwOJQTR-252BNJqj8m2SoqUQjGFqqqsE9fHOfguVxvT5fJk-253D-26reserved-3D0&d=DwMFAg&c=ZQs-KZ8oxEw0p81sqgiaRA&r=2OsE44buE5NKkGGctYIwOw&m=G2mgSJL442V9XQjrWrgYzM9C5fV08Rtj1vPJ4IsifK4&s=-C2NKT0guwLlUAT5i8jzNLKg9vEB5oRZ9mpu37uB8D4&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam04.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.educause.edu-252Fcommunity-26data-3D02-257C01-257Cjonathan-2Dkimmitt-2540UTULSA.EDU-257C56cae395534540efa66608d7906e4a92-257Cd4ff013c62b74167924f5bd93e8202d3-257C0-257C0-257C637136675682251805-26sdata-3DdLynMMWkV9-252BxpNZFRH-252FH5hNhVvLE1dTgM2z4NiGuegM-253D-26reserved-3D0&d=DwMFAg&c=ZQs-KZ8oxEw0p81sqgiaRA&r=2OsE44buE5NKkGGctYIwOw&m=G2mgSJL442V9XQjrWrgYzM9C5fV08Rtj1vPJ4IsifK4&s=0wWhsmP4u04i2aN3DPwhHog6yzxk0W_vMnblLjHBq_Y&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam04.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.educause.edu-252Fcommunity-26data-3D02-257C01-257Cjonathan-2Dkimmitt-2540UTULSA.EDU-257C56cae395534540efa66608d7906e4a92-257Cd4ff013c62b74167924f5bd93e8202d3-257C0-257C0-257C637136675682251805-26sdata-3DdLynMMWkV9-252BxpNZFRH-252FH5hNhVvLE1dTgM2z4NiGuegM-253D-26reserved-3D0&d=DwMFAg&c=ZQs-KZ8oxEw0p81sqgiaRA&r=2OsE44buE5NKkGGctYIwOw&m=G2mgSJL442V9XQjrWrgYzM9C5fV08Rtj1vPJ4IsifK4&s=0wWhsmP4u04i2aN3DPwhHog6yzxk0W_vMnblLjHBq_Y&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMFAg&c=ZQs-KZ8oxEw0p81sqgiaRA&r=2OsE44buE5NKkGGctYIwOw&m=G2mgSJL442V9XQjrWrgYzM9C5fV08Rtj1vPJ4IsifK4&s=yTWAs3KdJ6SJTBmhvMCokWQRTl7ydEYCdecdlwac42k&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community