Re: Password Management

["Windham, Gary D - (windhamg)" <windhamg () EMAIL ARIZONA EDU>]

We use Stache<https://www.saltycloud.com/stache/>, which is developed by UT Austin's ISO (who also developed DorkBot, 
ISORA, and other security tools) and provisioned in a SaaS model through SaltyCloud (a "public benefit corporation"). 
We use it for both end-user credentials as well as securing/sharing other secrets (e.g., API keys, license keys, S/MIME 
certificates, etc). It integrates with our campus SSO and has a very robust "M-of-N" security model for administrator 
access to end-user secrets (requires a quorum, so that a single administrator can't retrieve end-user secrets 
unilaterally).

Thanks,
--Gary

--

Gary Windham

Principal Enterprise Systems Architect

University Information Technology Services

The University of Arizona



Email: windhamg () email arizona edu<mailto:windhamg () email arizona edu>

Office: +1 520 626 5981


On Mon, Feb 25, 2019 at 8:54 AM Greg Williams <gwillia5 () uccs edu<mailto:gwillia5 () uccs edu>> wrote:
Looks like this topic hasn’t been discussed in a while (~2 years).  We *have* had around 100 users in LastPass 
Enterprise for our IT department for the past 4 years.  This is the 4th year in a row that the price has increased 100% 
year over year.  It was $8/year/user 4 years ago.  So over 4 years $8*2*2*2 = ~62/year/user today.  What is everyone 
else using these days?  Are you using DUO with it as well?  Thanks!

Greg Williams, ME
Director of Operations
Office of Information Technology
Lecturer
Department of Computer Science

University of Colorado Colorado Springs
1420 Austin Bluffs Parkway, (EPC 136A)
Colorado Springs, CO 80918
Phone: (719) 255-3292
Connect: Skype | WebEx<https://uccs.webex.com/meet/gregwilliams>
www.uccs.edu<http://www.uccs.edu/>