Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[farmshare-discuss] Two-Factor Coming to Farmshare June 16th!

Nan McKenna nan.mckenna at stanford.edu
Wed Aug 19 12:56:58 PDT 2015


Hello:

If you have concerns, you need to raise them with ISO - the Information Security Office, not with the Accounts Team. They selected the tool; the Accounts Team implemented and supports it. 

--Nan

________________________________________
From: farmshare-discuss <farmshare-discuss-bounces at lists.stanford.edu> on behalf of Zhiming Wang <zmwang at stanford.edu>
Sent: Wednesday, August 19, 2015 12:48 PM
To: Open discussion for users of FarmShare
Subject: Re: [farmshare-discuss] Two-Factor Coming to Farmshare June 16th!

> On Aug 19, 2015, at 12:11 PM, Alex Chekholko <chekh at stanford.edu> wrote:
>
> On 8/19/15 12:01 PM, Zhiming Wang wrote:
>> I don't want to argue about the security aspect of TOTP vs a proprietary
>> solution, but I do want to be offered a TOTP option, which seems to be
>> the industry standard anyway. Right now I'm using my good old TOTP
>> secret key, but I feel for the new users who are forced to use Duo.
>
> Hi Zhiming,
>
> Our team (Stanford Research Computing) is a user of the services provided by the Stanford Accounts team, just like all our users.

Yeah, sorry, I wasn't implying that your team is the one to blame. But it is possible to communicate our concerns to the Accounts team?

> I haven't been through the two-step device configuration setup myself in a while; in what sense are users "forced to use Duo"?

Quoting from https://itservices.stanford.edu/service/webauth/twostep:

> Note: If you currently use Google Authenticator for your second factor you can continue to do so. However, you are no longer able to set up Google Authenticator on your smartphone or tablet. The Duo Mobile app is the preferred replacement.

Best,
Zhiming



More information about the farmshare-discuss mailing list