MFA Enforcement Within The University Wiki Service
- Matthew Spangenberg
For Assistance
If you have any questions about the changes being made to the University Wiki Service, please do not hesitate to contact help@wikis.utexas.edu.
What changed:
After June 15th, 2023, the University Wiki Service (UWS) will require multi-factor authentication (MFA) for all EIDs authenticating to Confluence in order to comply with IRUSP standards 4.1.4 and 4.6.1. We have been advised by the Information Security Office that users who are not required to authenticate through Duo may pose a security risk to the entire service.
Spaces with anonymous view access will not be impacted. This change only impacts wiki spaces which grant any permissions or page restrictions for specific EIDs who are not eligible for MFA/Duo (see below for a list of affiliations which are eligible for Duo).
To determine if your space grants anonymous view access (granting anonymous access other than view is not permitted by the Service Level Agreement/Objectives) you can select Space Tools > Permissions. This will show you who can access your wiki space, for further assistance please view Managing Wiki Space Permissions or Working with Groups and Group Permissions.
For example, if your wiki space restricts page add and view access to a researcher from another University who has a guest class EID, they will not be able to authenticate successfully and will receive an error message that they are not enrolled in Duo and to contact the help desk:
The following EID affiliations are eligible for Duo enrollment:
- faculty-current
- faculty-future
- faculty-former
- staff-current
- staff-future
- staff-former
- student-current
- student-future
- student-former
- affiliated-worker
- official-visitor
Action Required:
If you administer a wiki space within the University Wiki Service (wikis.utexas.edu) and your space is accessed by users without a current affiliation, please contact the UWS stewards via the contact information below, as users who are ineligible for Duo will be unable to access your content as of the above date.
Users who are eligible but have not registered for Duo can do so here: https://mfa.login.utexas.edu/
Space administrators who wish to allow users who are not eligible for Duo to view or add content to their wiki spaces can work with their Human Resources contacts to grant official visitor or affiliated worker affiliations.
Additional Details:
All users who attempt to access wikis.utexas.edu will be directed to authenticate through Enterprise Authentication with their EID credentials and then directed to Duo before authenticating. Users who are not enrolled in or eligible for Duo will be directed to a prompt to contact their organization’s IT help or support desk.