[Eril-l] vendors requiring phone numbers for MFA

Tue Apr 25 10:54:18 PDT 2023

Hi ERIL,

My notes in our Sierra ERM record state that Wiley began using MFA via email in February 2022.

Here’s what the login looks like:

[cid:image002.png at 01D9777D.6C6FBDA0]

I immediately received the code via email to continue logging in.

The other thing they had to do when they instituted this change was allow for anyone at an institution who needed access to have their own account.   Previously we had one admin account and we kept those credentials in ERM for those staff needing access to grab them from there.  Now we each have to maintain our own account because one person can’t be receiving this 6 digit code and not know who logged in and needed it to continue the log in process.

I don’t believe we subscribe to any databases yet that require the code comes to a mobile phone.

Regards,

Linette

Linette Koren She/Her/Hers
Manager of Electronic Resources
RIT Libraries
Academic Affairs
Rochester Institute of Technology
Wallace Library 1426
90 Lomb Memorial Drive
Rochester NY 14623
https://www.rit.edu/library
W: 585-475-6123
lxkwml at rit.edu<mailto:lxkwml at rit.edu>
[RIT | Rochester Institute of Technology]<https://www.rit.edu/>

CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure. If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient, you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibited.

From: Eril-l <eril-l-bounces at lists.eril-l.org> On Behalf Of Electronic Resources in Libraries discussion list via Eril-l
Sent: Tuesday, April 25, 2023 12:36 PM
To: Electronic Resources in Libraries discussion list <eril-l at lists.eril-l.org>
Subject: Re: [Eril-l] vendors requiring phone numbers for MFA

Ditto to Laura and David’s comments.  I do not use a cell phone app for my local 2FA and thus am very intuned to looking for other options.  If necessary, contact the publisher or perhaps your subscription agent could find out all the options.

Susan

Susan Davis (she/her/hers)
Acquisitions Librarian for Continuing Resources and Licensing Specialist &
  Electronic Resources Team Coordinator
University at Buffalo (SUNY)
134 Lockwood Library
Buffalo, NY 14260-2210
716-645-2784
716-645-5955 fax
unlsdb at buffalo.edu<mailto:unlsdb at buffalo.edu>
https://library.buffalo.edu/staff/sdavis-bartl<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Furldefense.com*2Fv3*2F__https*3A*2Flibrary.buffalo.edu*2Fstaff*2Fsdavis-bartl__*3B!!NLFGqXoFfo8MMQ!sZztPgtP4SFbEE8Qo20OhBFs_YAE6H9FLcSS2sX0-Nc2lfWYR0yAHx3_cRZLFFzD0VxPeJXlXcNMBv9OBN0cxI4*24&data=05*7C01*7Cunlsdb*40buffalo.edu*7C4c45647c07904b31baf108da3cbf2ea1*7C96464a8af8ed40b199e25f6b50a20250*7C0*7C0*7C637889089092551260*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=9HdsByqtN4QN4irQ590wc3Z9Ue9ds2XrPW63R5PjU*2B4*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!NLFGqXoFfo8MMQ!ugKSqsmQ8fLEyRc2MpT4mY6ZwIy-Q0CVNTl4LpgeLnDKXWMAlhhOlPx2vsAS2Oy7m5iW9MnCXI1jgdKbRU7dTFs$>

From: Eril-l <eril-l-bounces at lists.eril-l.org<mailto:eril-l-bounces at lists.eril-l.org>> On Behalf Of Electronic Resources in Libraries discussion list via Eril-l
Sent: Tuesday, April 25, 2023 12:26 PM
To: Electronic Resources in Libraries discussion list <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>>
Subject: Re: [Eril-l] vendors requiring phone numbers for MFA

I will second Laura’s suggestion, to check if email can be used for the 2FA. I have found this option to be often hidden under an “other options” link, below the default prompt for a phone number.

David Macaulay
Electronic Resources Librarian
University of Nebraska–Lincoln Libraries

From: Eril-l <eril-l-bounces at lists.eril-l.org<mailto:eril-l-bounces at lists.eril-l.org>> On Behalf Of Electronic Resources in Libraries discussion list via Eril-l
Sent: Tuesday, April 25, 2023 11:05 AM
To: Electronic Resources in Libraries discussion list <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>>
Subject: Re: [Eril-l] vendors requiring phone numbers for MFA

Non-NU Email
________________________________
Do the vendors allow MFA through a code in email?  A few of my staff and I have a shared email account that we monitor for invoices, troubleshooting,etc. that would work for these purposes and I believe a few of our admin accounts might be requiring MFA with this as an option already (can't remember which ones but I feel like I did this recently when pulling usage for ACRL stats).  If not, I would consider asking the vendor if this could be an alternative.

Laura Turner
Associate Dean of the Library
Head of Collections, Access, and Discovery
Helen K. and James S. Copley Library / University of San Diego
5998 Alcala Park, San Diego, CA  92110-2492
Phone:  (619) 260-2365 | lauraturner at sandiego.edu<mailto:lauraturner at sandiego.edu>

On Tue, Apr 25, 2023 at 8:58 AM Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>> wrote:
I just wanted to add "yikes!" to this. Luckily, I haven't (yet) come across this.

I don't have a smartphone (nor do I want one). Yes, I realize I'm a very small minority. I agree that if work wants us to use cell phones for work purposes, they should provide us with one (I do have a flip phone, but it's also almost never turned on). I wish there was an option for an email multi-factor authentication instead.

My own work does have an authentication app to log in remotely (which I only rarely do), and I use my tablet for that, but I'm not happy about that, either.

Of course, in this scenario, it's not really our own work requiring the cell phone, but it's the vendors. I think the "problem" is that so many people always have their smartphones with them and turned on, it's just assumed one will have it and be willing to use it for anything (work, included).

I'm sorry that doesn't really help you or answer your question. I just wanted to add my support for what you are saying.
Cindy

__________________________
Cindy Wiebe, MLIS
(she/her/hers)
Cataloguing & Systems Specialist
St. Mary's University Library
Calgary, Alberta, Canada
cindy.wiebe at stmu.ca<mailto:cindy.wiebe at stmu.ca>

[LOGO_stmu_library_BLUE&YELLOW_2019apr_100x72_email]

As a settler of German, English, Irish, and Scottish descent, I grew up in what is now known as Gravelbourg, Saskatchewan: Treaty 4 territory, which encompasses the traditional lands of the Cree, Ojibwe, Saulteaux, Dakota, Nakota, Lakota, and Métis peoples. I have lived in Mohkinstsis (now known as Calgary) for 32 years, on the traditional territory of the Siksikaitsitapi (the Blackfoot Confederacy): the, Siksika, Kainai, and Piikani First Nations. This is where Treaty 7 was made in 1877 between the British Crown and the Blackfoot, as well as the Tsuut’ina, and Iyaxe Nakoda peoples. This place is also home to the Métis Nation, Region 3.

________________________________
From: Eril-l <eril-l-bounces at lists.eril-l.org<mailto:eril-l-bounces at lists.eril-l.org>> on behalf of Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>>
Sent: April 25, 2023 9:44 AM
To: Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org> <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>>
Subject: [Eril-l] vendors requiring phone numbers for MFA

Hi all -

Vendors and other sites required for technical services work are starting to require a cell phone number for multi-factor authentication via an authenticator app or sms.  E.g., to login to admin sites and get usage statistics.  We do NOT want staff using their personal cell phones for business purposes, for multiple reasons.  It's highly unlikely our institution will provide us with cell phones!

Anyone have any suggestions for how to deal with this issue?

Thanks and best, Theresa

Theresa Arndt
Assoc. Director for Library Resources & Administration
Dickinson College
Carlisle, PA 17013
Office/voicemail:  (717) 245-1750
arndtt at dickinson.edu<mailto:arndtt at dickinson.edu>
she/her/hers
_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org<https://urldefense.com/v3/__http:/lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org__;!!PvXuogZ4sRB2p-tU!HqmDUqKAZnkKTMzJn2tgpA1QklR09fY_xlHri4gesBnuApHBGD_goUa-SCwbAvqabgElfpo_jhHTt8Hb_LpZSg$>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230425/eb67497e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 144942 bytes
Desc: image002.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230425/eb67497e/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 12318 bytes
Desc: image003.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230425/eb67497e/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 17036 bytes
Desc: image004.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230425/eb67497e/attachment-0002.png>