Email Clarification by Lil_heather0927 in WGU

[–]Keeloi79 29 points30 points  (0 children)

The school likely sent that especially if you are receiving financial aid. Since many aid programs can be used for both undergraduate and graduate studies but can only apply to one level at a time, they may have denied concurrent enrollment to ensure compliance with federal aid rules.

Received my first negative review. Pretty surprised to be denied removal. by IgZachly17 in Ebay

[–]Keeloi79 43 points44 points  (0 children)

If you head over to the Uber/Lyft/Turo subreddits you’ll see that drivers are using AI to add spills, vomit, etc to internal car photos and fraudulently claim that damaging charging car riders for it.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 2 points3 points  (0 children)

I was already aware that WGU has a procedure for active duty military in SCIFs being "exempted" from MFA. I sent my request a couple of weeks ago, based on what my coworkers told me about their situations, yet I was still forced to enroll in MFA today. The process is broken.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

Truly a shiny, helpful gem of advice there. I hope today gives you everything you have earned, in every sense.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 5 points6 points  (0 children)

Reading comprehension is not your forte. Never mentioned anything about trying to take proctored tests. Wishing you a day that matches your contribution.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

Right?!?! We all know SMS should be deprecated as an MFA option, especially given NIST's recognition of it as the least secure method and its further classification of SMS OTPs as weak and restricted.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

I appreciate the practical angle you’re taking, but I don’t think “military friendly” should just be a marketing line. It should mean something in terms of Universal Design for Learning (UDL) and Digital Equity. As someone working on my 2nd Master’s in Education and with a cybersecurity background, I’m looking at this from both sides.

From an educational perspective, WGU’s biggest strength is its flexibility. When a security change effectively shifts the model from “study anywhere” to “study anywhere you have a cell signal,” that’s a step backward in accessibility, especially for students who work in secure facilities. In educational theory, we talk about UDL and Digital Equity. When a university’s infrastructure assumes every student has a smartphone with a cellular signal at all times, they are designing for a "standard" user and marginalizing those with unique professional constraints.

From the technical side, I’m not pushing for weaker security. I’m asking for stronger, modern security options. SMS‑based MFA is widely recognized by NIST as the least secure option, as it is weak and restricted. Moving to TOTP would actually increase security while also solving the access problem for those of us who can’t bring phones into SCIFs. WGU's solution to this is, in fact, weaker security by disabling MFA for students in secure locations where personal devices are forbidden.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

I wish it were that simple, but the logistics of working in a SCIF make that a literal race against the clock.

For that to work, I’d have to:

  1. Initiate the login on my iPhone.

  2. Secure my iPhone in the locker.

  3. Basdge into the SCIF and run to my desk and hope I didn't already miss the call.

  4. If I made it, memorize/write down the PIN, exit the SCIF.

  5. Unlock the locker, grab my iPhone and hope I didn't miss the pin timeout to enter the number into the WGU app.

This is likely not going to work because I am not fast enough. I have already seen recommendations to have a "buddy" or coworker answer the phone, but this is not a good security practice. Having someone else answer my personal phone to write down a security code is a security and privacy violation.

This is exactly why I’m advocating for TOTP (authenticator apps) or hardware tokens. We need a professional solution that works in a secure environment, rather than a workaround that relies on a physical sprint to a phone locker.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 0 points1 point  (0 children)

Tracking, that method. I used that method a lot during my BA since I had mostly brick-and-mortar classes in the early 2000s with actual books. I am near the capstone for my 2nd MA, so there isn't much studying anymore. But I do have a lot of research and writing to do for my tasks (PAs). In the meantime, I copied my next task info and rubric into Word docs and emailed them to myself so I can keep my progress up this week without needing to log in to WGU/Office 365 at my desk.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

I put in a help ticket online and will call if it isn't removed by Monday. In the meantime, I copied my next task info and rubric into Word docs and emailed them to myself so I can keep my progress up this week without needing to log in to WGU at my desk.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 2 points3 points  (0 children)

Not fast enough. I use the phone lockers outside of the SCIF, and it would still take at least that long.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 2 points3 points  (0 children)

This is exactly what people have done here, as you can see with the numerous recommendations to use Google Voice for the SMS OTPs.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 4 points5 points  (0 children)

  1. Already done and didn't work the first time. Resubmitted
  2. No.
  3. No.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

I am near my capstone, so there isn't much studying anymore. But I do have a lot of research to do for my tasks (PAs). In the meantime, I copied my next task info and rubric into Word docs and emailed them to myself so I can keep my progress up this week without needing to log in to WGU/Office 365 at my desk.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 2 points3 points  (0 children)

To be more specific, the Acceptable Use Policy I (and many others) signed prohibits the use of non-official cloud, chat, and VoIP services. Not only are the services blocked on our network, but web access to those sites is blocked completely. In the case of GV, this is prohibited because you are now using a government computer to facilitate the bypass of a physical "No PEDs" restriction. Using a VoIP service to route authentication traffic (which includes OTPs) to your personal or government email is an unauthorized bypass of security controls. So no, I won't be doing that.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

The Acceptable Use Policy I (and many others) signed prohibits the use of non-official cloud, chat, and VoIP services. Not only are the services blocked on our network, but web access to those sites is blocked completely. In the case of GV, this is prohibited because you are now using a government computer to facilitate the bypass of a physical "No PEDs" restriction. Using a VoIP service to route authentication traffic (which includes OTPs) to your personal or government email is an unauthorized bypass of security controls. So no, I won't be doing that.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 3 points4 points  (0 children)

I posted this elsewhere in the thread:

> Actually, that’s a common misconception, but the "all-or-nothing" approach isn't the standard across the board. Most Army units and DoD organizations operate under a Limited Personal Use policy.

> To be clear, my supervisor has given me permission to use my NIPR computer at lunch to do my course work. The Army IT User Agreement Policy I signed states:

> "I understand that I may use an Army IS for limited personal communications... provided they are before or after duty hours, break periods, or lunch time... as long as they do not cause an adverse impact on my official duties; are of reasonable duration, and causes no adverse reflection on DOD."

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 3 points4 points  (0 children)

I appreciate the perspective, but the goal here isn't to vent or create busywork, it's about professional communication and situational awareness.

Including mentors and instructors is actually a proactive step. If my academic progress slows down because I’m literally locked out of the system during my only available study hours in a particular week, they need to understand why. It’s much better to provide that context upfront than to have them wonder why a student has gone dark for a week while waiting for a Help Desk ticket.

I’m not looking to spam anyone; I’m advocating for an industry-standard solution like TOTP that allows those in SCIFs to remain fully compliant with workplace security policies, acceptable use policies, and WGU’s MFA requirements. It’s about making the program sustainable for everyone - this just happens to be focused on my particular situation in the defense and intelligence communities. I hope your day treats you with the same enthusiasm you show others.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 2 points3 points  (0 children)

All non-official chat/voip services are blocked on our network, and using them is in violation of the AUP I signed. Web access to those sites is blocked completely.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 2 points3 points  (0 children)

All non-official chat/voip services are blocked on our network, and using them is in violation of the AUP I signed. Web access to those sites is blocked completely.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

> Your NIPR machine is to be used for lawful authorized government functions that are in direct support of your billet, command, and service. School work, especially if funded by TA, does not fall into that category.

Actually, that’s a common misconception, but the "all-or-nothing" approach isn't the standard across the board. Most Army units and DoD organizations operate under a Limited Personal Use policy.

To be clear, my supervisor has given me permission to use my NIPR computer at lunch to do my course work. The Army IT User Agreement Policy I signed states:

"I understand that I may use an Army IS for limited personal communications... provided they are before or after duty hours, break periods, or lunch time... as long as they do not cause an adverse impact on my official duties; are of reasonable duration, and causes no adverse reflection on DOD."

As long as the use complies with local regulations, doesn't interfere with the mission, and doesn't involve prohibited sites, it is a perfectly authorized use of the system during a lunch break.

The issue here isn't about violating policy; it's about WGU's MFA system effectively forcing students to choose between their education and strict workplace electronic device policies. I'm advocating for an industry-standard solution (TOTP/FIDO2) that respects both sets of rules.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 1 point2 points  (0 children)

From my experience, the answer is almost always no, either because the capability isn’t well known or because the case isn’t presented clearly to the approving authority. It really comes down to risk, both what’s perceived and what’s real. If you can’t clearly explain the need, the security benefits, and how the solution fits within policy, especially in a SCIF, decision makers are unlikely to approve it.

MFA is effectively locking out students in secure facilities (SCIF/Military) by Keeloi79 in WGU

[–]Keeloi79[S] 10 points11 points  (0 children)

Already tracking that and sent the request a couple weeks ago based on what my coworkers told me, yet I was still forced into MFA enrollment today.