MIT Touchstone is the Institute's  single sign-on (SSO) web authentication service that allows members of the MIT community to log in to participating MIT and federated websites and applications using their MIT Kerberos credentials. When using a Touchstone-enabled application, your credentials are never passed to the application service.

New in 2024: IS&T has launched a new version of Touchstone, now powered by Okta Identity Engine, a modern, cloud-based and extensible platform.

Available To 
Students, Faculty, Staff, Affiliates

Benefits and key features

  • Allows MIT users to authenticate to protected websites, including both MIT-hosted and cloud-based services, without entering their Kerberos credentials into multiple applications.
  • Touchstone is integrated with Duo for multi-factor authentication (MFA).


Getting started

MIT users:

Web application developers and administrators:

More information