WHAT IS MULTI-FACTOR AUTHENTICATION?
Multi-factor authentication (MFA), sometimes called two-factor authentication, requires the use of a physical device in addition to a password when logging into an account. Without both factors – the device and the password – you cannot login. This makes a stolen password alone effectively worthless.
HOW DOES THE MINES MULTI-FACTOR AUTHENTICATION SYSTEM WORK?
Mines has selected Duo Security to provide multi-factor technology to Mines. The Duo solution is flexible and secure while at the same time providing a simple and straightforward user experience. Using Duo to login to an account involves three steps.
-
Enter your username and password as usual.
-
You will be sent a challenge that requires you to prove you have the device associated with your account.
-
After verifying your identity, you will have access to your account the same as always.
HOW DO DEVICE CHALLENGES WORK?
Users may configure one or more mechanisms to prove that they have the device associated with their account. Once configured any one mechanism is sufficient to authorize a login.
-
Duo Push – An application installed on your mobile device will pop-up a message immediately after you have entered your password. The login process will stall until you press the OK button on the pop-up. Once you have pressed OK the login process completes automatically.
-
Hardware Token – Users who don’t have a mobile device can receive a small hardware token about the size of a USB memory stick that displays a random number. After you have entered your password the webpage or application you are logging into prompts you for the number currently displayed on your token. You can request a free hardware token at https://helpcenter.mines.edu.
-
Universal 2-Factor (U2F) – Universal 2-Factor devices are an emerging standard for multi-factor authentication. U2F tokens are USB devices similar in size to the hardware token. However, unlike the hardware token, the U2F token talks directly to the authentication process. Rather than typing the challenge response into the application pressing a button on the U2F token transfers the response to the application.
WHO CAN USE THE MULTI-FACTOR SERVICE?
Our multi-factor authentication service is available to any active Mines' student, faculty or staff member. For faculty & staff members usage of MFA is required. Students' usage of MFA is, currently, optional.
WHY SHOULD I USE THE MULTI-FACTOR SERVICE?
Password abuse is responsible for the vast majority of information security breaches in the world today. Criminals have a dizzying array of tools at their disposal, all geared toward obtaining passwords by either technical attacks or social engineering. Because MFA requires both your password and a second device in your possession (like a phone or hardware token), if a criminal does discover your password they are still unable to access an application protected by multi-factor authentication.
Documentation
Additional information can be found at the ITS website: https://its.mines.edu/mfa/