Passwordless & MFA Rollout
The university was a constant target of credential-phishing campaigns, and the help desk was overwhelmed with password-reset tickets. SMS-based MFA was widely bypassed, and a string of account takeovers had compromised payroll direct-deposit details. Leadership wanted phishing-resistant authentication without alienating a large, non-technical user base.
Assessed the existing MFA estate and identified the weakest authentication methods in use.
Designed a Conditional Access framework requiring phishing-resistant methods for sensitive applications.
Piloted Windows Hello for Business and FIDO2 security keys with IT and finance staff.
Built a phased enrollment campaign with clear, non-technical communications and self-service guidance.
Retired SMS as an allowed method for high-value applications once adoption thresholds were met.
Phishing-resistant authentication reached 92% adoption across staff and faculty. Account-takeover incidents dropped to near zero and password-reset volume fell by more than two-thirds, freeing the help desk for higher-value work.
Book a free 30-minute discovery call. We'll talk through your environment and where the biggest wins are — no obligation.