Upcoming ITS Security Enhancement: Multi-factor authentication and email policy update
In an effort to protect Mines information and keep our data as secure as possible, we are updating our email policy and instituting the use of multi-factor authentication. By making these targeted policy changes now, we can better protect personal and institutional data.
The recommendations for approval, set to be reviewed in September, are as follows:
- Disable the ability for users to have POP enabled for their mailbox.
- Support IMAP connections until Fall 2021. These must use OAUTH, which is an authentication process that uses access tokens instead of allowing the application to store your password. “Password” or “Basic” authentication is not supported for user mailboxes using IMAP.
- Require all official Mines business and communications use Mines email accounts.
- No automatic forwarding of Mines email to other third-party email systems, such as a personal Gmail account.
- Mailbox inbox forwarding rules will be disabled.
Once this email policy is approved, there will be a transition period from September to November, allowing anyone not currently using a compatible email client to comply by November 15, 2020.
Multi-factor authentication and how it works
Multi-factor (also called two-factor) is the most effective technology for protecting campus information by providing strong verification of your identity and eliminating the usefulness of stolen or compromised credentials. When authenticating over the network, you are asked to verify your identity with something you have (your phone, fob on your keyring, etc.). Mines has selected technology from the company DUO to provide our multi-factor authentication solution. ITS has been using DUO for more than 18 months, and it has been required for all FA&O employees since January. If you are not using DUO, you will need to acquire and use this solution by Sept. 1, 2020. You can get started now by visiting mfa.mines.edu.
ITS support
We understand these enhancements may impact your daily routine, and our Mines Service Center is here to support you in these changes. The Service Center can help you with email policy questions and establishing multi-factor authentication.
We have live/real-time help available to you from 7 a.m. to 5 p.m., Monday-Friday at extension 2345, or you can submit a ticket with the Mines Help Center.