In support of the Multi-Factor Authentication (MFA) Strategy produced by the Information Security OfficeISO The Information Security Office (ISO) is the university’s information security team. (ISOISO The Information Security Office (ISO) is the university’s information security team.), Enterprise AuthenticationAuthentication Verifying the identity of a user, process, or device, often as a prerequisite to allowing access to a system’s resources. and UT Shibboleth will be configured to enforce multi-factor authenticationMFA Authentication makes use of one or more factors of authentication: something you know (e.g., a password), something you have (e.g., your smartphone), or something you are (e.g., a fingerprint). Multi-Factor Authentication (MFA) makes use of two or more factors when authenticating you. for current faculty, current staff, current students, future faculty, and future staff regardless of the resource being accessed on June 15, 2020. The Executive Compliance Committee approved the date and approach on April 15, 2020.
Multi-factor authentication provides an additional level of security when using university online services. Cyber-security attacks are on the rise with 20% more university accounts compromised in 2019 as compared to 2018. Additionally, compromised student and guest accounts have risen 51% since 2018. Forecasting from the university’s ISO predicts this growth will only continue without intervention.
More information can be found on the Campus-Wide MFA Implementation project page.
- May 26, 2020 – Canvas and Zoom
- June 15, 2020 – All other applications integrated with Enterprise Authentication and UT Shibboleth.
ITSITS Information Technology Services (ITS) will begin communicating broadly to campus end users in mid-May.
Application owners should perform analysis and/or testing of their applications to ensure readiness for this change.
If you are an application owner and do not think that your application will be prepared for June 15, you must request a temporary reprieve by submitting an ISO Exception Request.
If you are an application owner and would like assistance in testing, please contact firstname.lastname@example.org.