Duo 2-Factor Authentication at MSI


All researchers using secure shell (ssh) to connect to MSI high-performance computing cluster Mesabi, Mangi, and (very soon) Agate are required to use Duo 2-factor authentication. For the vast majority of our researchers at the University of Minnesota, this will require no action as you are already using Duo to access University email and other IT services.

If you are an external user of MSI systems, and have a Person of Interest (POI) account, you may need to set up Duo authentication with UMN IT if you have not done so already. Instructions are on the IT website: Duo: Set Up and Use Duo Security.

The difference you see when connecting via ssh will be limited to a challenge for authentication - researchers are able to select how they'll be authenticated; with any of the devices compatible with Duo (see https://it.umn.edu/services-technologies/how-tos/duo-enable-duo-security-new-user#device-options) such as a Duo push notification or a phone call. You’ll then confirm your identity with the device you’ve set up with Duo, and then proceed to be connected.

Updated documentation pertaining to using DUO 2-Factor Authentication at MSI
 

Connecting to HPC Resources

Connecting to Interactive HPC Resources

Reusing SSH Resources

Using WinSCP to transfer data

Transferring data between other Unix machines and MSI Unix machines

Transferring data between a Mac or Windows computer and MSI Unix computers