Tag Archives: Information Assurance

U-M Cloudflare Celebrates 1,000 Sites

More than 1,000 of the University of Michigan websites are protected with U-M Cloudflare, a significant milestone for the project implementation team.  Cloudflare provides a critical security capability to protect university websites, web applications, and DNS (Domain Name System) servers from Distributed Denial of Service (DDoS) attacks and break-in or takeover attempts. Work continues to get more sites… Read More »

Guidelines for Managing Active Directory (UMROOT) Accounts

U-M IT professionals who manage Active Directory (AD) accounts in UMROOT have an important responsibility for the security of those accounts. This responsibility includes ensuring that they are: Those who manage AD accounts in UMROOT should review a complete list of guidelines annually. Please see Active Directory Non-uniqname Accounts  (U-M Weblogin required). Thank you for diligence in managing… Read More »

Duo releases a new look to all customers — coming to U-M Feb. 20

On Tuesday, February 20, 2024, the University of Michigan will start using an updated Duo Universal Prompt screen for two-factor authentication. All Duo customers across the world, including U-M, are required to transition to the Universal Prompt, and Duo is ending support for the traditional version. 

Enhanced confidentiality of information on ITS Websites

Information and Technology Services (ITS) is reviewing more closely all technical service information published publicly. In the spirit of an open, higher-education environment, much of the documentation and content published by ITS has been accessible to the public, even when only intended for the U-M community. Going forward, the ITS approach will be to limit access to some… Read More »

A farewell to Cosign

On November 1, 2023, the ITS Identity and Access Management (IAM) team and colleagues across ITS and the university gathered to celebrate the retirement of the Cosign service at U-M. Created by members of U-M’s IT Commons group in 2001, Cosign was a web-based, single-sign-on solution that was rapidly adopted at other universities. As U-M’s Cosign reached the… Read More »

U-M requiring password reset for all UMICH (Level-1) accounts

The University of Michigan has mandated that passwords for all UMICH (Level-1) accounts be changed by the end of Sept. 12. An email informing faculty, staff and students across the Ann Arbor, Dearborn and Flint campuses, as well as Michigan Medicine, was sent from Ravi Pendse, vice president for information technology, and Sol Bermann, chief information security officer.… Read More »

Cosign retirement success

Originally designed at U-M more than twenty years ago, Cosign was once widely used across higher education. The degree to which U-M had integrated Cosign into countless applications was a testament to its success. However, the user base dwindled at U-M and across higher ed as institutions transitioned to more modern authentication protocols (OIDC and SAML). At U-M… Read More »

Upcoming changes to Duo two-factor authentication

Duo has released a new Universal Prompt to replace their traditional two-factor authentication prompt that U-M currently uses. ITS Identity and Access Management (IAM) is planning to switch U-M Weblogin to use the Duo Universal Prompt in early 2024. Visit the Upcoming Changes to Duo page on Safe Computing to see an example.  The advantages of the Universal… Read More »