RSA Adaptive Authentication

[Cantor, Scott]

On 7/6/15, 2:53 PM, "users on behalf of Rob Gorrell" <users-bounces at shibboleth.net on behalf of rwgorrel at uncg.edu> wrote:

>Well, for us, we've been looking at adding MFA to many of our commodity services (Google, Box, O365, Canvas) which consequently all happen to be behind our shibb IdP. As such, we're not interested in offloading the login and need something practical for the masses (cost wise). RSA themselves were the first to tell us we'd never afford SecurID for the whole campus (no surprise there)

Nobody should mistake my comments about SecurID as a fondness for the company. They've actually stopped giving commissions to their people on SecurID sales too, so that's another reason they wouldn't advocate it.

>but quickly turned the convo to their Adaptive Authentication as their obtainable MFA using the typical phone and sms stuff but "better" with its adaptive abilities. Anyway, I pretty much had formed the same opinion Scott, but before I wrote off their empty promises of working with shibb and not offloading our login as the cries of despite sales people, i just wanted to see if anyone had looked at it more in depth than I have (though my doubts remain strong).

We have not pursued it to the point that I could tell you for certain, but in our case the sales droids were outright skeptical of that possibility themselves. I tend to take "you can't do it" pretty seriously since you don't hear it much.

-- Scott