This week we added a feature to RefTool to display the OSU photo ID on record for ONID accounts. This feature was added to facilitate identity verification, e.g. when providing a Duo bypass code.

Please note that photo IDs are sensitive data. We have access to this data in order to perform our job functions. You should not be looking at any data that you do not have a business need to look at.

As stated in the OSU Acceptable Use of Computing Resources: “Refrain from unauthorized viewing or use of another person’s computer files, programs, accounts, or data.”

Also we are subject to the provisions of FERPA, federal law that protects student data. All IT employees are required to do FERPA training in order to access RefTool. You can retake FERPA training at any time here: https://registrar.oregonstate.edu/ferpa-training-module

Also note that as professionals, we should not be discussing sensitive data with colleagues unless there is a business need to. This is especially true when posting to semi-public forums such as Slack. Please be cognizant of other customers in the room who may overhear (or see) sensitive information about themselves or someone else.

Starting Thursday, July 25, 2019 there will be two additional methods to login with Duo. New documentation for these methods is in-progress:

• Yubikey (and other “Security keys”): https://oregonstate.teamdynamix.com/TDClient/KB/ArticleDet?ID=83300
• Apple Touch ID: https://oregonstate.teamdynamix.com/TDClient/KB/ArticleDet?ID=83299

Questions? Ask in the #duo channel on Slack.

Hello all,

On this Wednesday from 5:10 pm to 5:20 pm, RefTool will receive a major update! This update will facilitate the Service Desk’s vetting process to providing password reset PINs to ONID users. There are 2 new features.

Masking Alternate Contact Information

Currently, by default RefTool displays the user’s alternate email and phone number in full:

After the update, RefTool will mask the client’s alternate contact info by default.

Users of RefTool can reveal the alternate contact info by clicking on the “Show alt. contact” button. Doing this also displays a warning to  the user not to share the full info.

Displaying a Person’s OSU ID Picture

For ONID-based accounts ONLY, RefTool will load the OSU ID card’s picture OSU has on record for a person.

Note that OSU do not have pictures for the accounts below:

• General mailboxes
• Non-ONID accounts (AD-based accounts in various domains, e.g. science, engineering, TSS)

Unless these accounts have their own profile pictures linked from somewhere, an image will not be available.

That’s all folks. As always, if you have questions, comments, or concerns, let me know!

For demonstration, all identifiable info contained in the screenshots regarding the masking of alternate contact info have been edited via Google Chrome’s Inspector. ONID user “bennybeav” and all their contact info are made up.

We should always try to do a data backup before sending a computer to the vendor for warranty repair work. Vendors routinely wipe the drive when doing repairs, and do not restore the customer’s data.

If we can’t get a backup, talk to the customer before sending the computer in for repair.

The Warranty Repair Process article has been updated to reflect this information.

The postal letters for the May security incident are going out at the end of this week. Starting Monday, we may have some new calls from affected people. I have reopened the parent ticket and updated the KB article with the draft message.

Note that while the university is offering 12 months of free credit monitoring service, residents of Massachusetts will receive 18 months due to MA law.

Please remember to be kind and take your time helping these individuals. Thank you!

Parent ticket: https://oregonstate.teamdynamix.com/TDNext/Apps/425/Tickets/TicketDet?TicketID=9602764

KB article: https://oregonstate.teamdynamix.com/TDClient/KB/ArticleDet?ID=80754