A Tale of Two Factor

Kevin Dale / Erik Wieland / John von Eichhorn
-
Proctor

UCSF has spent the last several years improving our security posture, including hardening systems, tightening border routers, expanding DLP, and adding other types of threat protection. A sudden increase in phishing pushed our rollout of two-factor authentication for VPN and email up by 6 months, to just before the holiday travel rush. It took a huge effort from many teams and stakeholders to get it done, but we successfully enrolled over 25,000 users in 3 weeks. Our CIO paid us the ultimate compliment, saying it was the quietest go-live he had ever seen. Learn from us just how hard it is to support faculty traveling on 6 continents (especially Africa), why millennials are our new best friends, what a Yubikey is and why you might not want one, and the magical power of cookies in making the project successful.