Multi-Factor Authentication

Summary This research examines how several large research institutions have implemented multi-factor authentication (MFA) via the Duo service. The brief discusses authentication options, implementation timelines and re-authentication policies, and how profiled institutions have overcome common obstacles to MFA implementation. Download the report Key observations from our research 1. Institutional IT departments first deploy multi-factor authentication (MFA) to a small internal audience, such as IT security staff and senior administrators, before expanding to a broader audience. 2. While IT departments are concerned with security when implementing MFA, each institution faces trade-offs between security and convenience. 3. Profiled institutions implement Duo and single-sign on (SSO) on independent timelines. 4. Existing opinions about IT services affect how users react to a new service like Duo.