[41617] in Resnet-Forum
Re: Duo and IMAP
daemon@ATHENA.MIT.EDU (Jeremy Mooney)
Wed Mar 29 18:15:46 2017
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=001a113f9bde793a7b054be5e269
Message-ID: <CAGWC-qygrYez1entnLvHobXN0JQkA=TokdBhq_XnNNQFqF-hKw@mail.gmail.com>
Date: Wed, 29 Mar 2017 17:13:22 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Jeremy Mooney <j-mooney@BETHEL.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <CAJYsP4YHN7R2O9GP16mpMHoV1xA8mT6SqwceLOx1LEoEo1dVHA@mail.gmail.com>
--001a113f9bde793a7b054be5e269
Content-Type: text/plain; charset=UTF-8
Turning off IMAP shouldn't impact Android or iOS using the normal email
configurations. There are reasons people use IMAP to avoid device policy,
but I can't imagine that's good for battery life or desired from the
institutional perspective anyways.
Any halfway modern version of apps for both major platforms also redirects
to your SAML provider when the email address is entered for configuration,
so 2-factor should work just like on a web login (and you can leave
allow-less-secure apps disabled).
On Mon, Mar 20, 2017 at 1:33 PM, Bud Hiller <dhiller@bucknell.edu> wrote:
> Hey all, here's a question for you: we're a G Suites campus, and we've
> moved all staff to Duo multi-factor auth, and we're in the process of
> moving faculty there this semester. Our CIO has hinted that he might be
> dropping any sort of IMAP connection moving forward, since Duo only works
> with web logins through our CAS server (which means if you use Apple Mail,
> you're unaffected).
>
> That would also shut off checking email on your phones, and I can't
> imagine that there's a campus in the country that doesn't allow staff,
> students, faculty and administrators to check their university email on
> their phones without going through a web based interface where you have to
> type in your passwords!
>
> Are there any schools that enforce multi-factor auth to this extent? I
> can't imagine the riot if that was proposed here, and we're no different
> than any other school in that respect.
>
> Bud Hiller
> Bucknell Univ
> Lewisburg, PA
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
--
Jeremy Mooney
ITS - Bethel University
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--001a113f9bde793a7b054be5e269
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Turning off IMAP shouldn't impact Android or iOS using=
the normal email configurations. There are reasons people use IMAP to avoi=
d device policy, but I can't imagine that's good for battery life o=
r desired from the institutional perspective anyways.<div><br></div><div>An=
y halfway modern version of apps for both major platforms also redirects to=
your SAML provider when the email address is entered for configuration, so=
2-factor should work just like on a web login (and you can leave allow-les=
s-secure apps disabled).</div></div><div class=3D"gmail_extra"><br><div cla=
ss=3D"gmail_quote">On Mon, Mar 20, 2017 at 1:33 PM, Bud Hiller <span dir=3D=
"ltr"><<a href=3D"mailto:dhiller@bucknell.edu" target=3D"_blank">dhiller=
@bucknell.edu</a>></span> wrote:<br><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div =
dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:small;color:#00=
0000">Hey all, here's a question for you: we're a G Suites campus, =
and we've moved all staff to Duo multi-factor auth, and we're in th=
e process of moving faculty there this semester. Our CIO has hinted that he=
might be dropping any sort of IMAP connection moving forward, since Duo on=
ly works with web logins through our CAS server (which means if you use App=
le Mail, you're unaffected).=C2=A0</div><div class=3D"gmail_default" st=
yle=3D"font-size:small;color:#000000"><br></div><div class=3D"gmail_default=
" style=3D"font-size:small;color:#000000">That would also shut off checking=
email on your phones, and I can't imagine that there's a campus in=
the country that doesn't allow staff, students, faculty and administra=
tors to check their university email on their phones without going through =
a web based interface where you have to type in your passwords!=C2=A0</div>=
<div class=3D"gmail_default" style=3D"font-size:small;color:#000000"><br></=
div><div class=3D"gmail_default" style=3D"font-size:small;color:#000000">Ar=
e there any schools that enforce multi-factor auth to this extent? I can=
9;t imagine the riot if that was proposed here, and we're no different =
than any other school in that respect.=C2=A0</div><div class=3D"gmail_defau=
lt" style=3D"font-size:small;color:#000000"><br></div><div class=3D"gmail_d=
efault" style=3D"font-size:small;color:#000000">Bud Hiller</div><div class=
=3D"gmail_default" style=3D"font-size:small;color:#000000">Bucknell Univ</d=
iv><div class=3D"gmail_default" style=3D"font-size:small;color:#000000">Lew=
isburg, PA</div></div>
______________________________<wbr>_____________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/<wbr>archives/resnet-l.html</a>
______________________________<wbr>_____________________
</p></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla=
ss=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div><div>Jeremy =
Mooney</div><div>ITS - Bethel University</div></div></div>
</div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
--001a113f9bde793a7b054be5e269--
