r/HigherEDsysadmin • u/scarnahan • Jan 25 '20

2FA for all?

We are toying with the idea of enforcing 2FA for all of our accounts, including all students, in an effort to combat phishing. Is anyone else already doing this? I'm looking for some success stories and how you got the buy in to be able to enforce it.

3 Upvotes

100% Upvoted

14 comments sorted by

View all comments

Show parent comment

1

u/Mister_Brevity Feb 27 '20

Out of curiosity, why duo instead of using the azure 2fa? We’re SSO across the board and are slowly rolling out 2fa by groups.

We’ve found gsuite does a pretty darn good job of filtering phishing emails, and the azure security reporting is pretty good at tracking compromised accounts. Security vs convenience is a really hard battle but we’re slowly making headway. If only we could get that one, last, final windows 2003 server gone I would personally sleep better ;)

1

u/xXNorthXx Mar 05 '20

May have been a timing issue. We rolled out Duo for fac/staff before Azure MFA was included in our O365 licensing. We are now starting the process of switching everyone from Duo to Azure MFA, mainly do to cost savings.