[Eril-l] vendors requiring phone numbers for MFA

Wed Apr 26 07:21:57 PDT 2023

The College of the Holy Cross also has been struggling with two-factor
authentication for Admin vendor sites. We have used the email option (when
available) as well. So far, the sites have allowed email but if ever we get
to the cell phone only option, I was going to see if our new Zoom phone app
would work. This is very hard to manage when we have others using Admin
(even with separate Admin accounts) for tasks.
I really appreciate the attempt to secure our information but this is not
helpful for our workflows.

If anyone has any other ideas, I would like to read them.

Judith

--
Judith Nagata
Electronic Resources & Serials Librarian
Dinand Library
College of the Holy Cross
Worcester, MA 01610
p: 508-793-2639
e: jnagata at holycross.edu

On Tue, Apr 25, 2023 at 1:55 PM Electronic Resources in Libraries
discussion list via Eril-l <eril-l at lists.eril-l.org> wrote:

> Hi ERIL,
>
>
>
> My notes in our Sierra ERM record state that Wiley began using MFA via
> email in February 2022.
>
>
>
> Here’s what the login looks like:
>
>
>
>
>
> I immediately received the code via email to continue logging in.
>
>
>
> The other thing they had to do when they instituted this change was allow
> for anyone at an institution who needed access to have their own account.
> Previously we had one admin account and we kept those credentials in ERM
> for those staff needing access to grab them from there.  Now we each have
> to maintain our own account because one person can’t be receiving this 6
> digit code and not know who logged in and needed it to continue the log in
> process.
>
>
>
> I don’t believe we subscribe to any databases yet that require the code
> comes to a mobile phone.
>
>
>
> Regards,
>
>
>
> Linette
>
>
>
> *Linette Koren *She/Her/Hers
> Manager of Electronic Resources
>
> RIT Libraries
> Academic Affairs
> Rochester Institute of Technology
> Wallace Library 1426
> 90 Lomb Memorial Drive
> Rochester NY 14623
> https://www.rit.edu/library
>
> W: 585-475-6123
>
> lxkwml at rit.edu
>
> [image: RIT | Rochester Institute of Technology] <https://www.rit.edu/>
>
>
> *CONFIDENTIALITY NOTICE*: The contents of this email message and any
> attachments are intended solely for the addressee(s) and may contain
> confidential and/or privileged information and may be legally protected
> from disclosure. If you are not the intended recipient of this message or
> their agent, or if this message has been addressed to you in error, please
> immediately alert the sender by reply email and then delete this message
> and any attachments. If you are not the intended recipient, you are hereby
> notified that any use, dissemination, copying, or storage of this message
> or its attachments is strictly prohibited.
>
>
>
> *From:* Eril-l <eril-l-bounces at lists.eril-l.org> *On Behalf Of *Electronic
> Resources in Libraries discussion list via Eril-l
> *Sent:* Tuesday, April 25, 2023 12:36 PM
> *To:* Electronic Resources in Libraries discussion list <
> eril-l at lists.eril-l.org>
> *Subject:* Re: [Eril-l] vendors requiring phone numbers for MFA
>
>
>
> Ditto to Laura and David’s comments.  I do not use a cell phone app for my
> local 2FA and thus am very intuned to looking for other options.  If
> necessary, contact the publisher or perhaps your subscription agent could
> find out all the options.
>
>
>
> Susan
>
>
>
> Susan Davis (she/her/hers)
>
> Acquisitions Librarian for Continuing Resources and Licensing Specialist &
>
>   Electronic Resources Team Coordinator
>
> University at Buffalo (SUNY)
>
> 134 Lockwood Library
>
> Buffalo, NY 14260-2210
>
> 716-645-2784
>
> 716-645-5955 fax
>
> unlsdb at buffalo.edu
>
> https://library.buffalo.edu/staff/sdavis-bartl
> <https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Furldefense.com*2Fv3*2F__https*3A*2Flibrary.buffalo.edu*2Fstaff*2Fsdavis-bartl__*3B!!NLFGqXoFfo8MMQ!sZztPgtP4SFbEE8Qo20OhBFs_YAE6H9FLcSS2sX0-Nc2lfWYR0yAHx3_cRZLFFzD0VxPeJXlXcNMBv9OBN0cxI4*24&data=05*7C01*7Cunlsdb*40buffalo.edu*7C4c45647c07904b31baf108da3cbf2ea1*7C96464a8af8ed40b199e25f6b50a20250*7C0*7C0*7C637889089092551260*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=9HdsByqtN4QN4irQ590wc3Z9Ue9ds2XrPW63R5PjU*2B4*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!NLFGqXoFfo8MMQ!ugKSqsmQ8fLEyRc2MpT4mY6ZwIy-Q0CVNTl4LpgeLnDKXWMAlhhOlPx2vsAS2Oy7m5iW9MnCXI1jgdKbRU7dTFs$>
>
>
>
>
>
> *From:* Eril-l <eril-l-bounces at lists.eril-l.org> *On Behalf Of *Electronic
> Resources in Libraries discussion list via Eril-l
> *Sent:* Tuesday, April 25, 2023 12:26 PM
> *To:* Electronic Resources in Libraries discussion list <
> eril-l at lists.eril-l.org>
> *Subject:* Re: [Eril-l] vendors requiring phone numbers for MFA
>
>
>
> I will second Laura’s suggestion, to check if email can be used for the
> 2FA. I have found this option to be often hidden under an “other options”
> link, below the default prompt for a phone number.
>
>
>
> *David Macaulay*
>
> *Electronic Resources Librarian*
>
> University of Nebraska–Lincoln Libraries
>
>
>
> *From:* Eril-l <eril-l-bounces at lists.eril-l.org> *On Behalf Of *Electronic
> Resources in Libraries discussion list via Eril-l
> *Sent:* Tuesday, April 25, 2023 11:05 AM
> *To:* Electronic Resources in Libraries discussion list <
> eril-l at lists.eril-l.org>
> *Subject:* Re: [Eril-l] vendors requiring phone numbers for MFA
>
>
>
> Non-NU Email
> ------------------------------
>
> Do the vendors allow MFA through a code in email?  A few of my staff and I
> have a shared email account that we monitor for invoices,
> troubleshooting,etc. that would work for these purposes and I believe a few
> of our admin accounts might be requiring MFA with this as an option already
> (can't remember which ones but I feel like I did this recently when pulling
> usage for ACRL stats).  If not, I would consider asking the vendor if this
> could be an alternative.
>
>
>
> *Laura Turner*
>
> *Associate Dean of the Library*
>
> *Head of Collections, Access, and Discovery*
>
> Helen K. and James S. Copley Library / University of San Diego
>
> 5998 Alcala Park, San Diego, CA  92110-2492
>
> Phone:  (619) 260-2365 | lauraturner at sandiego.edu
>
>
>
>
>
> On Tue, Apr 25, 2023 at 8:58 AM Electronic Resources in Libraries
> discussion list via Eril-l <eril-l at lists.eril-l.org> wrote:
>
> I just wanted to add "yikes!" to this. Luckily, I haven't (yet) come
> across this.
>
>
>
> I don't have a smartphone (nor do I want one). Yes, I realize I'm a very
> small minority. I agree that if work wants us to use cell phones for work
> purposes, they should provide us with one (I do have a flip phone, but it's
> also almost never turned on). I wish there was an option for an email
> multi-factor authentication instead.
>
>
>
> My own work does have an authentication app to log in remotely (which I
> only rarely do), and I use my tablet for that, but I'm not happy about
> that, either.
>
>
>
> Of course, in this scenario, it's not really our own work requiring the
> cell phone, but it's the vendors. I think the "problem" is that so many
> people always have their smartphones with them and turned on, it's just
> assumed one will have it and be willing to use it for anything (work,
> included).
>
>
>
> I'm sorry that doesn't really help you or answer your question. I just
> wanted to add my support for what you are saying.
>
> Cindy
>
>
>
>
>
> *__________________________*
>
> *Cindy Wiebe*, MLIS
>
> (she/her/hers)
>
> Cataloguing & Systems Specialist
>
> St. Mary's University Library
>
> Calgary, Alberta, Canada
>
> cindy.wiebe at stmu.ca
>
> [image: LOGO_stmu_library_BLUE&YELLOW_2019apr_100x72_email]
>
> *As a settler of German, English, Irish, and Scottish descent, I grew up
> in what is now known as Gravelbourg, Saskatchewan: Treaty 4 territory,
> which encompasses the traditional lands of the Cree, Ojibwe, Saulteaux,
> Dakota, Nakota, Lakota, and Métis peoples. I have lived in Mohkinstsis (now
> known as Calgary) for 32 years, on the traditional territory of the
> Siksikaitsitapi (the Blackfoot Confederacy): the, Siksika, Kainai, and
> Piikani First Nations. This is where Treaty 7 was made in 1877 between the
> British Crown and the Blackfoot, as well as the Tsuut’ina, and Iyaxe Nakoda
> peoples. This place is also home to the Métis Nation, Region 3.*
>
>
> ------------------------------
>
> *From:* Eril-l <eril-l-bounces at lists.eril-l.org> on behalf of Electronic
> Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org
> >
> *Sent:* April 25, 2023 9:44 AM
> *To:* Eril-l at lists.eril-l.org <eril-l at lists.eril-l.org>
> *Subject:* [Eril-l] vendors requiring phone numbers for MFA
>
>
>
> Hi all -
>
>
>
> Vendors and other sites required for technical services work are starting
> to require a cell phone number for multi-factor authentication via an
> authenticator app or sms.  E.g., to login to admin sites and get usage
> statistics.  We do NOT want staff using their personal cell phones for
> business purposes, for multiple reasons.  It's highly unlikely our
> institution will provide us with cell phones!
>
>
>
> Anyone have any suggestions for how to deal with this issue?
>
>
>
> Thanks and best, Theresa
>
>
>
> Theresa Arndt
>
> Assoc. Director for Library Resources & Administration
>
> Dickinson College
>
> Carlisle, PA 17013
>
> Office/voicemail:  (717) 245-1750
>
> arndtt at dickinson.edu
>
> she/her/hers
>
> _______________________________________________
> Eril-l mailing list
> Eril-l at lists.eril-l.org
> http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org
> <https://urldefense.com/v3/__http:/lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org__;!!PvXuogZ4sRB2p-tU!HqmDUqKAZnkKTMzJn2tgpA1QklR09fY_xlHri4gesBnuApHBGD_goUa-SCwbAvqabgElfpo_jhHTt8Hb_LpZSg$>
>
> _______________________________________________
> Eril-l mailing list
> Eril-l at lists.eril-l.org
> http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230426/17c61063/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 144942 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230426/17c61063/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 12318 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230426/17c61063/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 17036 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230426/17c61063/attachment-0002.png>