Educause Security Discussion mailing list archives
Re: [External] [SECURITY] MFA in classrooms
From: "Telfer, Will" <Will_Telfer () BAYLOR EDU>
Date: Fri, 30 Apr 2021 18:16:10 +0000
There are no exemptions for MFA in classrooms, but we do allow phone numbers to be registered so instructors can enroll the phone in the classroom if there is one or call the Help Desk to be issues an emergency/temporary bypass code. We require MFA for Office apps (including email), our LMS, our cloud storage, & more. Since we have MFA on virtually everything student, faculty, & staff use on a daily basis, folks are usually good about remembering their devices because they know they will need them. We do allow a user on a system to be 'remembered' for 7 days so if the user chooses that option & is using the same classroom(s) consistently, they can authenticate without needing their device too. Thank You, Will Telfer, M.S. Identity and Authentication Analyst Information Technology Services Follow BaylorITS & look for the #BearAware: Twitter: @BaylorITS Facebook: facebook.com/BaylorITS Website: baylor.edu/BearAware [BU_e-signature] From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Gregg, Christopher S. Sent: Friday, April 30, 2021 1:06 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] [External] [SECURITY] MFA in classrooms We exempt MFA for Office365 from on campus. Other systems with sensitive category data require MFA from everywhere. Many academic focused systems do not have MFA at all (yet anyway). We are hoping to look into creating more granular, flexible MFA rules using Conditional Access in the near future as we revisit things for our longer term remote work plans. Chris Chris Gregg Associate Vice President of Information Security & Risk Management, CISO Innovation & Technology Services (ITS) csgregg () stthomas edu<mailto:csgregg () stthomas edu> p 1 (651) 962-6265 University of St. Thomas | stthomas.edu<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.stthomas.edu%2F&data=04%7C01%7CWill_Telfer%40BAYLOR.EDU%7C60574ea96e9546c6bc5808d90c02a112%7C22d2fb35256a459bbcf4dc23d42dc0a4%7C0%7C0%7C637554028287187512%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=dORm%2Fc3xvWBgOXBcv83XfTwOjsi7AwmAMW8RyzjPcR4%3D&reserved=0> From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> On Behalf Of Mark Reboli Sent: Friday, April 30, 2021 12:49 PM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: [External] [SECURITY] MFA in classrooms All, I am wondering how others have addressed access by faculty in classrooms to resources that require MFA: Do you require MFA in classrooms? If you do not, how do you address this area? Thank you. M Mark Reboli Network/Telecom/IT Security Manager Misericordia University 301 Lake Street Dallas, PA 18612 (570)674-6753 This e-mail and accompanying attachments are confidential. The information is intended solely for the use of the individual to whom it is addressed. Any review, disclosure, copying, distribution, or use of this e-mail communication by others is strictly prohibited. If you are not the intended recipient, please notify us immediately by returning this message to the sender and delete all copies. Thank you for your cooperation. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7CWill_Telfer%40BAYLOR.EDU%7C60574ea96e9546c6bc5808d90c02a112%7C22d2fb35256a459bbcf4dc23d42dc0a4%7C0%7C0%7C637554028287197507%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=aPz5f%2BN3NQjzRxEnI7Hl5HIoI1dQ%2FiicRkt5oHVlc64%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7CWill_Telfer%40BAYLOR.EDU%7C60574ea96e9546c6bc5808d90c02a112%7C22d2fb35256a459bbcf4dc23d42dc0a4%7C0%7C0%7C637554028287197507%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=aPz5f%2BN3NQjzRxEnI7Hl5HIoI1dQ%2FiicRkt5oHVlc64%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- MFA in classrooms Mark Reboli (Apr 30)
- Re: MFA in classrooms James Monek (Apr 30)
- Re: [External] [SECURITY] MFA in classrooms Gregg, Christopher S. (Apr 30)
- Re: [External] [SECURITY] MFA in classrooms Telfer, Will (Apr 30)
- Re: MFA in classrooms Paul Chauvet (Apr 30)
- <Possible follow-ups>
- Re: MFA in classrooms Menne, Michael S (Apr 30)