[Macpartners] Release of two-factor authentication for MIT Touchstone

[Mark Silis]

Good afternoon,

IS&T is pleased to announce the availability of two-factor authentication 
support for MIT Touchstone via Duo Security.  This support allows you
to associate a mobile or landline phone with your MIT Kerberos account,
and to require Touchstone logins to require access to this device in addition 
to your MIT personal web certificate or Kerberos password.

Two-factor authentication is of critical security importance; as
computational capacity increases, the ability of passwords alone to
protect sensitive data will continue to decrease as automated password
guessing attacks become faster and more sophisticated.

Web applications that provide access to personal information,
particularly financial data such as direct deposit, have been
frequent targets of security attacks, as noted in this recent IS&T
advisory:

http://ist.mit.edu/news/payroll_scam

Use of two-factor authentication is an effective and increasingly common
way of safeguarding against such attacks.

To register for a Duo Security account and enroll your phone, please
visit:

https://duo.mit.edu

and follow the instructions provided.  For additional instructions and support, please
refer to the IS&T Knowledge Base:

http://kb.mit.edu/confluence/x/RJkwCQ

If you have any questions or require assistance, please don't hesitate to contact
the IS&T Helpdesk via assistance via helpdesk at mit.edu or x3-1101.

Best,
Mark

Mark Silis
Director, Operations & Infrastructure
MIT Information Systems & Technology
mark at mit.edu 617.324.5900


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/macpartners/attachments/20150130/9804dd17/attachment.htm