Educause Security Discussion mailing list archives

Re: MFA LMS


From: Jason Edelstein <jasone () UCHICAGO EDU>
Date: Wed, 24 Jun 2020 15:14:50 -0500

We definitely do this via our SSO - Shibboleth, in our case. No MFA, no getting in until you have it, whether you're a student or faculty. There are some edge cases where people do open invitations or manually add for special classes, but I believe they are the exception.

-je-

On 6/24/20 3:12 PM, Garrett McManaway wrote:

All,

I am curious if anyone is currently using or looking at using MFA in front of their LMS and in particular Canvas? As the new norm is pointing towards far more online learning that we will eventually see more interest in maliciously accessing course content.

The scenario I am thinking of is that of hacktivist catching on to the news stories that are challenging the idea that HigherEd is offering a watered down product at the same cost and then posting course material online that they obtained illegally. Of course nothing is stopping someone with legit access from doing the same but I think less feasible in my mind.

Garrett McManaway

CISO & Sr. Director

C&IT - Information Security and Compliance

Wayne State University

Phone: 313-577-3454

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community <https://urldefense.com/v3/__https://www.educause.edu/community__;!!BpyFHLRN4TMTrA!qMe6JVdZaKFO52NaSaxultiokHYw3aHz_Pda_zIn_m3KA3mSKxE8L4sDSJM5ASIqNw$>


--
Jason Edelstein
Interim Director of Information Security
University of Chicago, IT Services
desk: 773 834 3457
security.uchicago.edu / 773 702 CERT


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: