...
| Table of Content Zone | ||||
|---|---|---|---|---|
|
Summary
Passwords alone are no longer sufficient. To address this RIT has moved to Duo's MFA service for the majority of services. Admins and developers, however, have access to large amounts of information and have privileges on servers that can cause significant damage if their credentials are compromised. Because of those risks, stronger and more efficient MFA is required for certain accounts. To achieve this, ITS has historically used OATH (One Time Passwords) for SSH and sudo access on linux servers and recently started requiring either certificates + PIN or Duo for Windows logons.
...