As phishing and credential misuse surge, colleges and universities are shifting toward identity-centric security to detect and contain threats operating within trusted systems.