Hi Robert,
We use MFA for all of our staff (admins, licensed staff) to access their AD accounts. Paras generally use Chromebooks and we haven't set up MFA on those yet.
We considered Duo and thought that the setup wasn't too bad, but the cost pushed us away from that option. We did end up purchasing hardware tokens (dongles) for staff, even though the solution we use (AuthPoint - which is associated with our WatchGuard firewalls) does allow for authentication on smartphones - but that's our district. I know that others have implemented MFA with phones.
We did do some testing using GWfE+ for the authentication on both AD and gWorkspace accounts. It works well for me, and I use it, but one of the techs found it to be inconsistent. IMO, it's worth a try if you use Workspace Plus since it wouldn't cost you anything extra.
FWIW
Best of Luck!
/\/\ ark
Mark Kline, M.Ed.Director of Technology
Washington Central UUSD
Montpelier, VT
just curious, are you using 2 factor authentication to protect any or all accounts in active directory? supposedly, our cyber insurance carrier is requiring us to use it for administrator level accounts. I'm looking into Duo, but it seems to me to be a big pain in the neck. feel free to reply off list ...
-----
Robert Wickberg
Technology Coordinator, BAMS, BUHS, and WRCC
802-451-3418
-----------------------------------------------------------------------
Search the SCHOOL-IT Archive
Manage your Subscription to SCHOOL-IT