Authentication Modernization

The University of North Carolina at Chapel Hill is seeking information from vendors to modernize its authentication environment and implement phish-resistant authentication and zero-trust principles. The university currently uses two separate SSO and MFA environments and wants to converge to a single authentication environment. The desired end state includes establishing a risk tiering scheme for people, enforcing phishing-resistant MFA, rationalizing Single Sign-On and MFA to a maximum of one vendor each, introducing device posture checking and device management, and coarse-grain authorization at Single Sign-On. The university is looking for a solution that can guarantee high-assurance authentication, manage the migration and consolidation of existing solutions, and bring device awareness to the authentication flow. • The solution should be able to handle multi-lateral federation, authenticate true guests, and reduce Service Desk call volume. • The solution should aid in identity proofing and self-service, and inform users via a captive portal or quarantine zone. • The solution should be able to detect compromised identities and integrate with a 3rd party SIEM. • The solution should be able to apply modern SSO phish-resistant authentication principles to legacy authentication environments. • The solution should be able to keep the infrastructure design simple, compartmentalized, and orthogonal to maximize reliability and uptime.