2-Factor Authentication Update DCSS October 16, 2015 Mary Dunker

2-Factor Authentication Update DCSS October 16, 2015 Mary Dunker

69,000 enrolled users

Every application that uses Login

81,000 Devices Phones

81,000 Devices Tokens 5245 OTP (Duo, YubiKey AES OTP, software) 662 U2F

Authentication Statistics Total Monthly Authentications 434,827 888,072 Jul Aug Users 911,382 Sep 68242 Protected Authentication Types This Month (October, 2016) 81% Push 5% Passcode 2% SMS 11% Voice 0% Bypass

DUO for Non-CAS/Non-Windows logins Applies to logins that are not subject to DUO 2-Factor authentication through CAS or Windows AD Dozens, perhaps hundreds, of apps across the university Approach: Google 2-Step Verification for Google Apps (including @vt.edu email) – summer 2017 Apply DUO to LDAP – Phased approach; to be complete in Dec 2017 Reviewing options for applying DUO to VPN Intent is to provide DUO/2FA to all VT logins

Questions www.it.vt.edu/2factor ?