2 Factor Authentication

[FN-GM]

Hello,

 

We have had a risk assessment carried out on the IT service for our MAT and one of the points was the lack of 2 factor authentication for accessing services externally. It is something I have been looking into recently anyway.

 

Do you have 2FA setup? What was your experience. How did staff take it?

 

Thanks

[pete]

We have 2FA for RemoteaApp services using Duo Mobile. Generally speaking, staff got on fine (it uses text messages, push notifications, time-based codes or a phone call).

 

Duo documentation is good and it was up and running a couple of hours after the purchase order went through.

 

Staff-wise:

 

We made it clear that 2FA wasn't optional when standing up the new RemoteApp service.

 

I wrote extensive how-to-guides: one per access platform (Windows, iOS, Android, OS X, Linux) and per authentication method (Phone app, text message, phone call), plus a a general overview of how it works and what applications are available.

 

Duo's free for a small amount of users, so you can easily stand up a test platform to see how it behaves (link it to your desktop login, for example)

 

I will note that the pricing we get (business tariff $1/user/month) rate is no longer available to new customers.

[RLR]

We've just asked our staff to enable it on their Google Accounts. Some staff are okay with it but some staff have said they don't want to use their personal phones. For staff that didn't want to use their phones we used our office DDI to turn on 2FA and then gave them a different method of authenticating such as backup codes or an authentication app on their school iPad.

 

Some staff dislike it but it's standard these days with internet banking and other high security services.