Skip to main content
Add as a preferred source on Google


Hobart and William Smith Colleges Finds MFA Success

  • By Dian Schaffhauser
  • 11/02/21

A New York institution has succeeded in getting its users to adopt multi-factor authentication. Hobart and William Smith Colleges began its MFA adoption in the 2019-2020 school year, tightening authentication procedures gradually among specific applications and web services and across its community of students, faculty, staff and network guests.

Recently, the institution, which is working with SecureAuth security products, had reached 100 percent adoption among its regular users.

MFA provides an additional layer of security beyond user name and password by requiring users to provide an extra credential, such as texting a just-in-time PIN or answering a challenge question.

Once a user has signed into a given service using MFA, the system remembers and trusts the same browser and device for 30 days. During that period, the user doesn't need to use the extra verification step for that service. (The exception is public computers like those in labs and classrooms.)

Mobile numbers are maintained in PeopleSoft and provided either by HR, when users are added, or through a self-service menu.

Aside from receiving a PIN to enter for authentication, users can also choose other delivery methods, including e-mail, voice and knowledgebase questions.

The selection of SecureAuth identity platform, according to Derek Lustig, the institution's director of Infrastructure and Security Services, was based on being able to "get federation, self-service password management and multi-factor authentication in one product" and being able to "go to one source for support."

Although users have settled into the use of MFA on campus, Lustig noted that the "fine-tuning" of authentication is continuing.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • Blue digital wireframe classical building structure

    Before AI, Fix Your Data

    Institutions don't have to solve every data problem before they can begin using AI responsibly. But they do need to treat information as a strategic asset — not a byproduct of operations — and start building toward AI-ready data now.

  • Digital cyberspace with particles and Digital data

    Report: AI Is Moving Faster than Data Trust

    AI agents are already in use or pilot at most organizations, but data visibility, governance and precision recovery capabilities have not kept pace, according to Veeam's new Data & AI Trust Gap report.

  • digital partnership handshake with glowing network effect

    Microsoft and OpenAI Rework Alliance, Loosening Exclusive Ties

    Microsoft and OpenAI have adjusted the terms of their high-profile partnership, signaling a shift in how the two companies will collaborate as competition in the AI market intensifies.

  • cyber security padlock

    AI Adoption Forces Trade-Off Between Speed and Identity Security, Study Finds

    AI adoption is forcing enterprises to trade security for speed — and identity controls are the first casualty, according to a new report from Delinea, a provider of identity security solutions for both human and AI agent identities.