[Action Needed] Set up Two Factor Authentication

Hello GitHub Users!

We have completed the migration of GitHub onto GitHub Enterprise, however by June 30th, it is important that you set up two factor authentication in your account.

Many of you have already enrolled in two-factor authentication when you received a message on Wednesday asking you to do so. Starting July 1st, we will be enforcing two-factor authentication and users who have not set this up will be removed until they set it up. Two-factor authentication with GitHub will only be required at a new login, not at the start of each session. On that day, GitHub users added as org members will start seeing a prompt to authenticate with their PIV card. Any contractors or collaborators who do not have one should contact their org owner to be converted to an external collaborator.

There are two options for two-factor authentication:

You can enter in a phone number to receive an SMS code when you log in to GitHub. This phone number is securely collected by GitHub and only used for this purpose.
Or you can install a mobile authenticator app which displays your two factor authentication codes with or without cell phone coverage. This is useful if you prefer not to receive text messages or may be working in environments where you cannot receive them.

GitHub has step by step instructions on how to set up two factor authentication here: https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication

As part of the process, you will be prompted to download a recovery code file, please save this file locally in case you lose access to the two-factor authentication method you set up.

We will be following up with users towards the end of the month to make sure as many people as possible has set this up before the June 30th cutoff.

If you need help setting this up, please contact org owner, see this list below:

  -----------------------------------------------------------------------
  **RPIO**            **Organization Owner**
  ------------------- ---------------------------------------------------
  R1                  Steve Boudrot

  R4                  Mike Dapkus

  R5                  Robert Senow

  R9                  Rob Homsher

  OA                  Reggie Washington

  OAR                 Jordyn Taylor

  OCSPP               Robert Schultz

  OLEM                Scott Christian

  OMS                 Connor Griffin

  ORD                 Joanne Mosuela

  OW                  Elinor Keith
  -----------------------------------------------------------------------

If your org isn't on the list, you can contact us at github@epa.gov

Thanks,

Connor

GitHub Guidance

@Aaron-Garland @adamtheising @aelarsen @andrewcy86 @AnneKuhn @bchastain @bhutzell @BKreakie @bmatkin @cahartin @chogrefe @coastwx @coder-hat @derikhaggard @dheist @drgarver1 @dschwede @eastjames @epainformat @flopezag-epa @gretchend @gxsarwar @havalapye @hvalle-systalex @jeff-willison @jeremybaynes @jfwambaugh @jmfalik @jodhernandezbe @JosephLBundy @jpleim @Justin-Coughlin @KaptainKirk @kharrisepa @kingroyepa @lerban @mccroweyclinton-EPA @Melduous @melissagqc @mgonzalez98 @montyali90 @morganteachey @mslama01 @mthawley @NSchumaker @pegeghy @pharten @rsmith07 @RTR1996

USEPA / ghe-announcement

[Action Needed] Set up Two Factor Authentication #17