OIT to begin Duo pilot for Shibboleth logins

To further protect university data and accounts against ongoing threats of phishing attacks and data breaches, OIT is piloting a new initiative to add Duo Two-Factor Authentication to Shibboleth logins. Shibboleth provides login access to many campus systems including the MyPack Portal, Web leave, ServiceNow, and numerous departmental-hosted systems.

Two-Factor Authentication, also referred to as 2-Step Verification, provides an additional layer of security during the login process. Google 2-Step Verification has been available for Google Apps @ NC State accounts for quite some time, and adoption is slowly increasing. In the near future, OIT will mandate Duo Two-Factor Authentication for all systems using the Shibboleth authentication service to enhance data and account security.

Over the next several weeks, OIT will test the new authentication process with various campus groups. Feedback from this pilot will be used to improve the authentication process and to create user documentation and a web presence.

OIT hopes to migrate campus users to this new service as quickly as possible. Additional project and migration details will be available in future editions of OIT News and via SysNews.