Page Comparison

hawaii.edu:store:uhims:general:mfa-enabled

 Person has registered for multi-factor authentication (MFA) and is not in Duo bypass mode. 

If CAS returns this value after a successful authentication, it can be surmised that the person has passed the Duo prompts in the UH Login screen.

Departmental usernames are currently not supported!

Non-personal usernames who are registered and enabled for Duo will not have this uhReleasedGrouping value.  This might change in the future, but as of this writing, UH Groupings was designed with people as grouping members (as opposed to usernames or email addresses). Departmental usernames are often used by multiple individuals, so their ambiguity seems counter-productive to authentication, authorization and MFA.

9/19/2018

mfa-enrolled

(use above hawaii.edu:store:uhims:general:mfa-enabled value instead)

Person has registered for multi-factor authentication (MFA).  Does not account for Duo bypass mode.

This will be removed in early January 2019, after everyone has transitioned to hawaii.edu:store:uhims:general:mfa-enabled is available and everyone has transitioned to it.

No longer available for general use.  Will be removed in early January 2019.

Contact its-iam-help@lists.hawaii.edu if you need to build a grouping with this information.

1/31/2018

Tentative

Provides more granularity than the generic roles of faculty, staff and student.