PM in this industry. Yes, IP-based access control is by a large margin the most common method for controlling access to academic resources. The ease of impleme

PM in this industry. Yes, IP-based access control is by a large margin the most common method for controlling access to academic resources. The ease of implementation and the anonymity it gives individual academic users are the driving factors. Of course, the sheer inertia and tradition of this solution is virtually impossible to alter, despite all the problems it obviously causes. Others on this thread mentioned OpenAthens, which is more common in Europe, but not the US. But OpenAthens is a full blown identity provider, which is obviously more complex to set up than simple IP auth.