Purdue to add two-factor authentication for all faculty and staff in September
Shortly after the start of the fall 2017 semester, all of Purdue’s faculty and staff will need to begin using two-factor authentication, known at Purdue as BoilerKey, to log into the OnePurdue (SAP) portal, improving security of personal and University data alike.
ITaP will roll out the new BoilerKey sign-up beginning in mid-April. Purdue faculty and staff can expect direct emails, social media posts and Purdue Today articles to give instructions on how and where to sign up throughout the summer and up until the September 19 deadline. The OnePurdue (SAP) portal allows employees to create leave requests and check paystubs. It also handles many of the University’s business functions.
Greg Hedrick, Purdue’s chief information security officer, says security staff are developing a streamlined step-by-step process to sign up for BoilerKey, so all faculty and staff should be able to sign up without assistance. However, departmental IT staff and the ITaP Customer Service Center will be available to answer questions and offer one-on-one help.
“We have worked hard to ensure signing up for BoilerKey is an easy process,” Hedrick says. “Using two-factor authentication on our campuses makes all employee accounts more robust against scammers and cybercriminals.”
Implementing BoilerKey at Purdue also protects the University from a growing number of cyberattacks on colleges and universities.
“This is a necessary step to keep pace with what others are doing in higher education to improve security around critical systems and help protect individuals’ data,” Hedrick says.
What is two-factor authentication?
BoilerKey adds a second login requirement to go with your password. At Purdue, it’s a numerical code randomly generated on a smartphone app called Duo or a key fob.
Essentially, even if someone were to get ahold of your password (if you fall for a phishing email, for instance), your account would still be protected because only you can physically access your smartphone or key fob to get the necessary login code.
Image caption: BoilerKey logo.
Writer: Kirsten Gibson, technology writer, Information Technology at Purdue (ITaP), 765-494-8190, firstname.lastname@example.org
Last updated: March 20, 2017