MIT Touchstone Authentication Landing Page

Touchstone and Duo updates coming March 22 MIT community members accessing systems using Touchstone and Duo authentication will notice some visual changes and an improved two-factor authentication experience as Information Systems and Technology (IS&T) implements updates to the Institute's single sign-on web authentication service on Friday, March 22, after 6 p.m. IS&T News: Touchstone and Duo updates coming March 22 Duo Universal Prompt Guide

On this page:

Overview

Touchstone is the MIT implementation of the Shibboleth SSO, an open source web single sign on application developed by Internet2. It allows login using various methods, including username and password and MIT certificate, and also allows users in the InCommon Federation or Touchstone Collaboration account to authenticate to a variety of web services securely.

Prior to the implementation of Touchstone, most websites used pure certificates to login. While certificates are an extremely secure method of authentication, certificates are frustrating in various ways, and part of Touchstone's purpose is to help work around these frustrations.

When a website works with Touchstone, you can log in with any of:

• your MIT certificate
• or your MIT kerberos username/password
• or with a Collaboration Account, if the website supports it.

How to Obtain

IS&T Is in the process of moving to a new collaboration account system. During the transition, please contact the IS&T Service Desk if you need access to any products or services via a new collaboration account.

Troubleshooting and FAQ's

• Touchstone FAQ
• What to do if a browser or App is prompting for a password after updating my certificate on a MacOS machine?

Have Questions or Still Need Help?

• Contact the IS&T Service Desk