[Eril-l] 2-step verification from Atypon

[Sanabria, Sarah Haight]

Hi Mark, all,

We’ve encountered this too.  I’m unsure of its utility for the purpose of logging into the librarian side of a vendor platform.  At present, the staff member who sets it up lets the team know she has done so.  We should probably be recording this in Alma.  I anticipate it would take the form of an internal note saying something like, “2-factor authentication set up by [person’s initials], [date].  I hadn’t considered the issue of staff using their personal devices, as our campus implemented 2FA for access to many online services.  Our staff are used to using their devices for logging in (for better or worse).

Thanks,
Sarah

Sarah Haight Sanabria
Electronic Resources & Serials Librarian
Interim co-director, Technology Services
Central University Libraries
Southern Methodist University
P.O. Box 750135
Dallas, Texas 75275-0135
voice: 214-768-3646
fax: 214-768-2337



From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Mark Winek
Sent: Tuesday, September 5, 2017 6:28 PM
To: eril-l at lists.eril-l.org
Subject: [Eril-l] 2-step verification from Atypon

Dear Collective Wisdom,

After logging into a few publisher sites hosted by Atypon, I noticed that I'm being prompted to set up 2-step verification at every turn. I can log in to my administrative account, but if I attempt to go to any other pages (such as to update IP addresses), I have to input my mobile phone number to receive a one-time code via SMS. It gives me the opportunity to remember my computer for 30 days (no doubt by cookie).

While I usually applaud these types of efforts, I'm wondering how you have dealt with this from an institutional point of view. Since I'm not the only one at my institution accessing the administrative accounts, I would have to ask my staff to use their personal mobile phones to run 2-step verification when the log on (since our desk phones don't take SMS). And if any one of them can verify by SMS, what's the added security of 2-step verification offering?

Thanks,
Mark

Mark D. Winek
Unit Head, Electronic Resources & Serials
Georgetown University
Joseph Mark Lauinger Memorial Library\
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20170906/8a51e743/attachment-0001.html>