Conference 2018 Contextual Access and Multi-Factor Authentication Lessons learned on getting past single-factor authentication!
Panelists Corey Scholefield - Team Lead, Identity Services Wendy Blake – Director, Network and Technical Services Sean Feil – Specialist, Identity, Information Technologies Sebastian Gonzales, Sr. Mgr – Identity & Access Mgmt. 2 Conference 2018
What are we talking about? Contextual Access Control Multi-factor Authentication ¡ ¡ 3 Conference 2018
Meet your neighbour! Meet your neighbour and discuss multi- ¡ factor authentication capability at your organization…! Deployed or not ? ¡ Support for or not ? ¡ 4 Conference 2018
Use Case - TRU Business Drivers ¡ Restricting privileged access ¡ Reduce risk of ransomware/phishing ¡ PCI Compliance ¡ 5 Conference 2018
Use Case - TRU ¡ Systems in scope for deployment Primary ¡ Password vault (thycotic) ¡ Firewall UI (Panorama) ¡ RDP to desktops (users who use VPN to access network) ¡ Secondary ¡ VPN ¡ Servers (Linux and Windows) ¡ Banner privileged accounts ¡ Root/administrator accounts ¡ BANSECURE named accounts ¡ INB accounts ¡ 6 Conference 2018
Use Case - TRU Lessons Learned ¡ Have a well defined plan ¡ If we knew now…..? ¡ Overall we have had a good experience ¡ 7 Conference 2018
Use Case - UCalgary 8 Conference 2018
UCalgary – Business Drivers Prevent account compromise Audit requirements Reduce Reduce costs Reduce lost support associated productivity burden with risk 9 Conference 2018
UCalgary – Deployment Deployed Testing Pilot Technical Pilot Business Pilot All Staff All Students 10 Conference 2018
UCalgary – Deployment LDAP SecurID native Legacy Interfaces (technical) RADIUS CAS (custom) SAML 2 WS-FED New Interfaces (technical) OpenID Connect OAuth RADIUS 11 Conference 2018
UCalgary – Deployment 12 Conference 2018
UCalgary – Lessons Learned 13 Conference 2018
UCalgary – Lessons Learned 14 Conference 2018
UCalgary – Lessons Learned 15 Conference 2018
UCalgary – Lessons Learned 16 Conference 2018
UCalgary – Lessons Learned 17 Conference 2018
UCalgary – Next Steps • Hardware token support and deployment strategy • Deploy to remaining staff and students • Expand systems protected by MFA • Strengthen contextual access to reduce need for token authentication 18 Conference 2018
UVic – Business Drivers Compromised Accounts Manage Risk AUDIT + PCI 19 Conference 2018
UVic – YubiKey MFA applications 2012 • Cisco VPN – for NETS Staff 2014 • Unix Shell - for Privileged Admins • Banner 8 Forms – Finance • On-premise Yubikey OTP Server + Key Management in IdentityIQ 2017 • VPN MFA access expanded to IT staff • CAS 5.2 SSO + Banner 9 / AppNavigator 2018 20 Conference 2018
UVic – Lessons Learned • Leadership • People • IT • Process • Clients • Technology Business Buy-in Process Driving Best- Forces practices • Audit • Gartner research • Info Sec • Unicon • Reputational support risk 21 Conference 2018
UVic – Next Steps Staff More Web apps desktops factors 23 Conference 2018
Use Case Business Drivers ¡ Deployment ¡ Lessons Learned ¡ If we knew now….. ¡ Next Steps ¡ 24 Conference 2018
25 Conference 2018
26 Conference 2018
27 Conference 2018
28 Conference 2018
29 Conference 2018
30 Conference 2018
31 Conference 2018
Use Case Lessons Learned. ¡ Don’t be afraid to ask for …. ¡ Some of the best support is in the communities… ¡ Set a 25 min floor to present… ¡ Test your communications not just your tech… ¡ If we knew now….. ¡ Portion Control…. ¡ 32 Conference 2018
Recommend
More recommend
