Hobart and William Smith Colleges Finds MFA Success

A New York institution has succeeded in getting its users to adopt multi-factor authentication. Hobart and William Smith Colleges began its MFA adoption in the 2019-2020 school year, tightening authentication procedures gradually among specific applications and web services and across its community of students, faculty, staff and network guests.

Recently, the institution, which is working with SecureAuth security products, had reached 100 percent adoption among its regular users.

MFA provides an additional layer of security beyond user name and password by requiring users to provide an extra credential, such as texting a just-in-time PIN or answering a challenge question.

Once a user has signed into a given service using MFA, the system remembers and trusts the same browser and device for 30 days. During that period, the user doesn't need to use the extra verification step for that service. (The exception is public computers like those in labs and classrooms.)

Mobile numbers are maintained in PeopleSoft and provided either by HR, when users are added, or through a self-service menu.

Aside from receiving a PIN to enter for authentication, users can also choose other delivery methods, including e-mail, voice and knowledgebase questions.

The selection of SecureAuth identity platform, according to Derek Lustig, the institution's director of Infrastructure and Security Services, was based on being able to "get federation, self-service password management and multi-factor authentication in one product" and being able to "go to one source for support."

Although users have settled into the use of MFA on campus, Lustig noted that the "fine-tuning" of authentication is continuing.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • hooded figure types on a laptop, with abstract manifesto-like posters taped to the wall behind them

    Hacktivism Is a Growing Threat to Higher Education

    In recent years, colleges and universities have faced an evolving array of cybersecurity challenges. But one threat is showing signs of becoming both more frequent and more politically charged: hacktivism.

  • Hand holding a stylus over a tablet with futuristic risk management icons

    Why Universities Are Ransomware's Easy Target: Lessons from the 23% Surge

    Academic environments face heightened risk because their collaboration-driven environments are inherently open, making them more susceptible to attack, while the high-value research data they hold makes them an especially attractive target. The question is not if this data will be targeted, but whether universities can defend it swiftly enough against increasingly AI-powered threats.

  • digital book with circuit patterns

    Turnitin and ACUE Partner on AI Training for Educators

    Turnitin is teaming up with the Association of College and University Educators to create a series of courses on AI and academic integrity designed to help faculty navigate the responsible use of AI in learning and assessment.

  • student with headphones engaged in virtual learning

    Virtual Learning that Works: 4 Ways to Build Real Engagement

    As colleges and universities expand online offerings, the goal now is clear: Build environments where students actively participate, not passively attend.