[IGPP Everyone] [EPSS Everyone] MFA - a few more details

[SALYARDS, STEPHEN]

Greetings,
   I was in a long meeting yesterday which covered a lot of technical details about MFA which I won't subject you to. However, four points may be of interest to some of you and are worth sharing.

First - A new website has been rolled out with a lot more information and some very useful details. If you have questions it is a good place to start
https://www.it.ucla.edu/security/resources/mfa-at-ucla

Second - A detail that is not clearly advertised, at least in my opinion, is that the secondary authentication is being handled by an outside provider. That means that whatever information is needed for the secondary authentication there is a copy on a non-university computer. This also includes personal information your DUO app may send back to the company that you agreed to at install time. Overall it is not a very intrusive system but since it is not clear in the Privacy statement and I know some of you care about things like this I thought I would mention it.

Third - There are other hardware solutions not provided by the university that work with this system. Among these is a hardware device called a Yubikey which can be acquired from third parties and tied to the MFA system. This is a device that communicates directly with the browser to hand off the authentication code so you only have to touch a button and don't need to type anything in. But - and a big one - it only works with the Chrome browser and only on devices that have a standard USB port. I can provide more info if anyone is interested.

Fourth - I had mentioned that the Cisco VPN client did not take the code. Well, they have now documented how to make that happen. When you log in and it asks you for your password you append the code after the password separating the two with a forward slash. So what you would type in would be something like "password123/064533". Again, if not clear let me know.

Finally, from the department perspective, we will be placing the order for the university endorsed code keys the middle of next week. Details on ordering and payment first thing Monday morning.

Thanks
Steve Salyards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.igpp.ucla.edu/pipermail/everyone/attachments/20171013/3e8bae9f/attachment.html>
-------------- next part --------------
_______________________________________________
Everyone mailing list
Everyone at dept.epss.ucla.edu
http://dept.ess.ucla.edu/mailman/listinfo/everyone