2013-09-27 - Deployment Strategies Subgroup Notes

Action Items

• Mike Grady will revise MFA Business Drivers, Deployment Decision Tree and Integration Patterns to reflect today's discussion.
• David Walker will revise Enterprise Deployment Strategies for Multi-Factor Authentication to reflect today's discussion.
• Everyone will review the decision trees and initial deployment strategies with particular attention to
  • the decision flows
  • the list of issues in the initial deployment strategies
  • the pros and cons in the initial deployment strategies
• Discussion of tactics to increase user community acceptance of MFA will be done in a future meeting.
• The Technology Issues Subgroup will be asked to address usability and accessibility issues.
• Mike Wiseman will report to the next full Cohortium meeting.

Highlights

• MFA Business Drivers, Deployment Decision Tree and Integration Patterns
  • There is some presumption of web-based services here. The descriptions will be made more general. Also, we will consider multiple platforms (e.g., web, AD, Radius, possibly mobile) when we address integration patterns for MFA.
  • The diagrams currently address three issues, whether to deploy MFA, why to deploy MFA, and the start of how to deploy MFA.  We will remove the third from the diagrams and integrate the deployment patterns into Enterprise Deployment Strategies for Multi-Factor Authentication.
  • For now, we'll focus on the institutional and user perspective diagrams.
• Enterprise Deployment Strategies for Multi-Factor Authentication
  • We will remove the "Other Topics" section at the end of the document, capturing the tactics for user acceptance in a new document for future discussion. The usability and accessibility issues will be move to the Technology Issues Subgroup.
  • The strategies will be aligned with the "why MFA" outcomes of the decision tree diagrams.
  • We will delay full Cohortium review of the document for now.