Over the Summer of 2024, the College of St. Scholastica’s web login process changed. The new login is part of an ongoing series of upgrades to maintain and improve CSS’s information technology infrastructure. Lately, however, the community has observed some smaller changes—sign-on is required more frequently, and Duo was not asking to authenticate. These changes have very different causes and have left community members wondering what else will change.
When CSS switched to the new login process, it was a migration to Microsoft’s Azure identity management system. This migration is still underway, with several smaller web applications still using the old login. Rachael Platt, CSS’s Identity Access and Security Service Manager, explained, “In Azure, we have the option to DuoProtect certain applications, and some of these are still in the process of transferring over.” Connecting that migration to the increase in login prompts, Platt continued, “When we first moved over … it was set to 20 days, then down to 14, then down to seven,” a deliberately gradual increase designed to avoid overwhelming the CSS IT Service Desk staff. “My.css is on a different timer,” Platt added, referring to the once-daily log-in requirement for my.css, also known as Brightspace.
The lack of Duo authentication, however, was not intended. “Google has a timeout session of seven days… When you jump to a different application, it’s saving it for seven more days. So that’s why people aren’t getting Duo’d,” Platt explained, though the issue has been fixed since that interview.
Multi-factor authentication systems, like Duo, are security measures designed to ensure that bad actors must breach more than one system to gain access. “For compliance and policy and auditing reasons, we have to have multi-factor authentication,” Platt said.
Regarding future changes to the login process, Platt said there were no plans for any, continuing “If there was, there would need to be a project proposal request, and then it would have to go through the Proposed Project Approval Process. Say that ten times fast!” Platt understood the concern over disruptions, but seemed confident in the introduction of formal project management processes, saying, “Part of that process would be informing the community and getting feedback.”
She also wanted to remind people to contact the CSS IT Service Desk with any IT issues. The IT Service Desk is located across from the Saints Shop, and can be reached at servicedesk@css.edu or 218-723-7007.