Frequently Asked Questions About Two-Factor Authentication
Q: When we say "two-factor authentication"
do we really mean SecurID?
A: Yes and no. We are in the process of selecting a vendor
for our two-factor authentication solution. The SecurID is a "token"
that is currently used to access the mainframe and some servers.
Users of those resources are required to two-factor authenticate
to gain access. However, depending on the vendor that is selected,
the "token" used may not be the "SecurID", but
may work similarly.
Q: Could non-MAIS systems use two-factor authentication
too?
A: Yes, we think that makes sense. MAIS should deploy two-factor
authentication in a way that enables any University unit to leverage
the system for its own departmental systems. For example, the LS&A
Data Warehouse could use the same two-factor authentication method
as M-Pathways.
Q: How many people will use two-factor authentication?
A: The goal is to include all operational users of M-Pathways
systems that have access to view, add, modify, or delete data other
than their own personal information. Because the M-Pathways systems
have over 8,500 operational users, the rollout will occur in phases.
Q: What type of authentication is most common
at the University?
A: Most U-M systems rely upon reusable passwords for authentications.
The most commonly used password is the Kerberos (umich) password,
which is used by a wide range of systems including: dial-in services,
many e-mail services, the U-M Online Directory, Course Tools, and
Wolverine Access. The University also uses Microsoft-based authentication.
Most of the campus uses a Microsoft "tree" for authentication that
is run by ITCS. Some units, such as Business & Finance, maintain
their own separate tree.
|
CONTACT US
