1. Two Step Verification: Duo Deployment Project
CIO Council | June 27, 2016 | Smith Campus Center

2. Two Step Verification (2SV) Project Description
Objective:
Deploy DUO for two-step verification as broadly and quickly as possible, prioritizing all VPNs first and then the rest of HarvardKey web sign-on applications
Executive Committee:
Anne Margulies, Christian Hamer, Jason Snyder, Charles Kling, Stephanie Gumble, Acacia Matheson + Peter Baskette/PM

3. Two Step Verification (2SV) Project Description
Four Proposed Work Streams/Teams:
Communications – All Phases
Support – All Phases
VPN – Phase One
HarvardKey/Applications– Phase Two
Plus User Experience “Super Group” composed of Communications + Support

4. Project Work Structure – Proposed Teams
Communications
Support
VPN
HarvardKey/Apps
Acacia
Courtney
Luke
Bill K
Kevin
Tim V
Gretchen
Tim G
Sandy
Bill D
Masha
Masha/Jane
Infra/NOC?
VPN tunnel owners
App Owners
Peter/PM
Others as needed

5. Phase One – June-September
Scope and Timeframe
Phase One – June-September
HUIT VPN Tunnels (RSA, Other “named” [including Schools], “Gencom”) [6,000-10,000 users]
Potentially CA and/or other staff for all Key web applications
Phase Two – September-January
All remaining faculty, staff and students using Key for web applications [39,000-43,000 users]
School-based VPNs (HBS, HMS, UHS, DCE, HKS)

6. Risks Issues Risk and Issues Identifying perm project manager
24x7 coverage for critical user
General resource availability/contention – NOW PRIORITIZED
Business Impact, especially during year end and start up
Short time line
Issues
Difference between Enabled and Activated – nuanced, difficult to explain, but necessary?
User Interface improvements
Technical issue with VPN Push, Phone, SMS timing
Financial model considerations
Ensure eligibility for HarvardKey and DUO for all potentially affected users (e.g. prospective students)

7. Milestones and Metrics
VPN tunnel cutovers:
7/30: approximately 80 RSA VPN tunnels (approximately 800 users)
9/15: approximately 170 “named” VPN tunnels (approximately 5,000? users, including many Schools)
9/15: “Gencom” VPN tunnel (approximately 5,000 users/last 90 days)
January 2017: School-based VPN tunnels
HarvardKey cutover:
January 2017: all HarvardKey web sign-on applications
Users will be “opted in” in waves leading up to this date
Potential Metrics:
Number of VPN Tunnels migrated
Number of users using Duo (currently 3,3000+)

8. Questions and Concerns