In order to increase security and compliance, Oracle HR and Banner will be moving behind the GlobalProtect VPN on Thursday, July 27. Along with this change, the GlobalProtect VPN login process will move from Shibboleth to Duo Single Sign-On.

A fall 2023 audit determined that Oracle HR, Banner administrative pages, Banner Communication Management and Banner Access must be protected by two-factor authentication at both the network and application level. To satisfy this requirement, the Division of IT (DoIT) is adding a GlobalProtect login requirement to these systems. Customers using these systems will need to log in to GlobalProtect before accessing information in both Oracle HR and Banner. These changes apply to both on- and off-campus logins.

Additionally, Duo Single Sign-On is required for newer versions of the GlobalProtect client (5.2.9 and above). When implemented on July 27, the customer’s login will change from prompting for the user’s NetID and instead require it in the format “NetID@colostate.edu”. The GlobalProtect client will also use the new Duo Universal Prompt, a simplified and accessible Duo login experience. The Division of IT will apply this change to other applications over the next eight months as the traditional prompt will reach the end of support on March 30, 2024. The division will communicate about these changes as timelines are determined.

Action to be taken by customers include enrolling and downloading Duo on devices and downloading GlobalProtect VPN to machines.

For additional help or questions, reach out to the CSU Fort Collins IT Help Desk by calling (970) 491-7276, through email at help@colostate.edu, or submit a Support Ticket at helpdesk.colostate.edu.