[Halld] MFA for SSH and VDI: March 19

[Alexander Austregesilo]

Dear Colleagues,

Please remember that Jefferson Lab will start requiring multifactor 
authentication (MFA) for Secure Shell (SSH) connection to login.jlab.org 
as well as the Virtual Desktop Infrastructure (VDI) beginning tomorrow, 
Tuesday March 19.

Connections to Linux VDI machines and SSH through login.jlab.org will 
require enrollment in the MobilePass system, which can use either 
token-based authentication or authentication via an authenticator app 
(for example, Google or Microsoft). For more information, please refer 
to these Knowledge Base articles:

MobilePass: 
https://jlab.servicenowservices.com/kb?id=jlab_kb_article_view_require_login&sysparm_article=KB0011911

Google: 
https://jlab.servicenowservices.com/kb?id=kb_article_view&sys_kb_id=a8caee091b990910a552ed3ce54bcbe3

If you previously enrolled in this system for access to Hall D (hallgw) 
or ifarm (scilogin), you should be able to use the same credentials.

NB for VDI users: The initial connection to vdi.jlab.org through the 
VMware Horizon Client or your browser will continue to ask for your CUE 
password, the MFA password is only needed in the second step when 
connecting through VDI to the RHEL7/9 machines.

Please let me know in case you encounter any problems, or report them 
through the ServiceNow ticket system:

https://jlab.servicenowservices.com/navpage.do

Best regards,

Alex

-- 
Alexander Austregesilo

Staff Scientist - Experimental Nuclear Physics
Thomas Jefferson National Accelerator Facility
Newport News, VA
aaustreg at jlab.org
(757) 269-6982