Contents


Page Last Modified: Oct 19, 2018


Share Link:   https://answers.fredonia.edu/x/eIHr


Report problems with this page

Service

Duo Security Multi-factor Authentication (MFA)

Service Manager
Benjamin Hartung
Department

Contact
Maytum 117, (716) 673-4725, hartung@fredonia.edu
Service Owner
AVP/CIO - Stephen Rieks
Description

As a response to the increasing number of phishing scams that impact Fredonia employees and the University's overall risk for a data breach, the Information Technology Services department has implemented a high-security login process for Fredonia eServices and other critical electronic resources that requires a second method to confirm the identity of the person logging in. Referred to as two-step or two-factor authentication, this process, which uses Duo Security, asks individuals logging in to confirm their identity using a smartphone, via automated voice calls, or a hardware token. Duo Security accounts will be provisioned out to users based on the risk associated with the data and systems they have access to.

Currently Duo Security is protecting the following Fredonia  electronic services:

  • Drupal Web Publishing
  • FredApps (GSuite)
    • Email
    • Drive 
    • Docs
    • Sheets
    • Slides
    • Sites
    • Groups
    • Contacts
    • Calendar
  • OnCourse
  • Starfish
  • SUNY Employee Portal
    • DegreeWorks
    • ITEC Confluence
    • Ensemble
    • SANS
  • 1Password Teams

NOTE: other Fredonia electronic services will be protected as technical and funding limitations are addressed.

Service Users

User Services

Business Services

Technical Services
  • Account Management 
  • Basic End User Training
Requirements
  • Need to be a University employee with access to sensitive University owned data or systems as determined by the Information Security Officer.
  • Need to adhere to all federal, NYS and University policies as they relate to account and password management.
  • You must notify the Information Technology Services via a FredQuest ticket to bypass Duo Security should you travel to a country under the jurisdiction of EU General Data Protection Regulation (GDPR). For more information: http://www.eugdpr.org/.
Rates / Cost of Use
The Information Technology Student Technology Fee (Tech Fee) funds the annual subscription fee.
Getting Started
  1. ITS will add your eServices account to the Duo Security system based on the risk associated with the services and sensitive data you have access to.

  2. You will receive a Duo Security Enrollment email requesting you to activate a new device as your new second factor for authentication. Fredonia permits you to register a smartphone (Android or iphone), a landline, or a tablet as your second factor. You may have as many second factors as you wish (e.g. smart phone, landline, tablet, hardware token).

NOTE: It is strongly recommended that all mobile devices used as a second factor be encrypted and have a screen lock enabled. We also recommend that you register a second device as an alternative method of authenticating. 

 Help with Duo is available! Call the ITS Service Center directly at (716) 673-3407.

Availability

24/7/365

Getting Help

All requests for assistance are completed using FredQuest: 
https://fredquest.fredonia.edu/

SLA Notes

Typically the turnaround for support tickets is next business day.

Business Procedures
All knowledge base articles for this service will be located in Answers.fredonia.edu.
Change Procedures
Changes to the service (transition, additions, and discontinuations) must be reviewed by TAC and approved by the Service Manager (CIO) and Cabinet.
Assigned Primary Support

Assigned Secondary Support

RACI Chart

Level

Responsible

Accountable

Consulted

Informed

Primary

Ben Hartung

Ben Hartung

ITS Service Center

User

Secondary

Idalia Torres

Steve Rieks

ITS Service Center

User

Tertiary

 

 

 


Date Last Modified

Oct 19, 2018

Status
Active

Short URL to this page: https://answers.fredonia.edu/x/eIHr