However, I'm not sure if GT's Duo service is self-hosted or is hooked into Duo's service "in the cloud".
To be honest, their useR experience is pretty slick compared to most two factor solutions. I am happy for them, (and their users) that they have been successful, selling into large organizations – good user experience usually isn’t found in large enterprise software due in part to the principal agent problem.
And, yes, Duo is normally a great solution for us.
Just want to add another data point: Dartmouth was a relatively early adopter, and while a bit annoying, it chugged along just fine.
I am in the physics program
We do have an app that lets faculty exempt students from 2FA, but it's mostly for students who need the exception when taking tests etc.
You are going to see a big change in the tech at UC very soon. The old guard is getting the boot.
Yes, altough I did not get affected that much. I was just trying to renew overdue book from the library system. But I'm sure ~45k student got affected harshly in their first day of the semester.
> We do have an app that lets faculty exempt students from 2FA, but it's mostly for students who need the exception when taking tests etc.
It would be better if there is an option to allow graduate students who do research (PhD candidates) to be treated differently as they are not students anyway. And Duo is annoying. I understand that this is not something that will happen specially with the reputition of UC IT department (sorry but you problably know)
> You are going to see a big change in the tech at UC very soon. The old guard is getting the boot.
This is something I have been hearing since I joined but without the old guard getting the boot part. Each year with increasing student enrollment, we can't even provide stable internet connection. I still remember two years ago the outage of the auth server for wifi system on the first day of classes (after covid) and this stayed the case for almost a week.
Millions of students coming online, textbooks are digital now, SSO all the things. Perfect storm.
I spent 20 minutes trying to figure out what new cookie I needed to grey-list for the half dozen redirections in the M365 auth flow to not bork before I thought to check if it was generally broken.
Great success.
I was among the last to have to use dial-up from off-campus (which required a specialty ISP @ 26.6k or some awful speed). Fortunately, they upgraded their system while I was there, so I could use the “much” faster DSL. Still not as nice as on-campus internet.