MIT Touchstone is the Institute's single sign-on (SSO) web authentication service that allows members of the MIT community to log in to participating MIT and federated websites and applications using their MIT Kerberos credentials. When using a Touchstone-enabled application, your credentials are never passed to the application service.
New in 2024: IS&T has launched a new version of Touchstone, now powered by Okta Identity Engine, a modern, cloud-based and extensible platform.
Available To
Students, Faculty, Staff, Affiliates
Benefits and key features
- Allows MIT users to authenticate to protected websites, including both MIT-hosted and cloud-based services, without entering their Kerberos credentials into multiple applications.
- Touchstone is integrated with Duo for multi-factor authentication (MFA).
Requirements
- MIT Kerberos account
- Duo multi-factor authentication
Getting started
MIT users:
- New MIT students, staff, faculty, and affiliates: Get an MIT Kerberos account, then enroll in Duo
Web application developers and administrators:
- See the Provisioning Guide
- Contact touchstone-support@mit.edu for further assistance.
More information
- Touchstone in the Knowledge Base
- Touchstone powered by Okta in the Knowledge Base