UGA Identity Management Understanding MyIDs and UGA IDs Kristi Wall Identity Management (IDM) team at EITS September 9, 2014 U N I V E R S I T Y O F G E O R G I A What We’ll Discuss • What is IDM or Identity Management at UGA? • What is a MyID? • MyID vs. UGAID • MyID Profile application • Departmental MyIDs: Best practices • Websites authenticating with MyIDs • What is CAS? More websites going to CAS? • Online Directory and FERPA implications 2 Identity Management: Incoming Data Health Sciences Students Athena HR IDM UGAID Creation Forms (OVPR, Payroll) MyID Request Form 3 Identity Management: Outgoing Data Email EDS CAS IDM Online Directory 4 What is a MyID? • An account used for authentication; it has a password • Combines identity data about a person and their UGA • • • • • affiliation Most MyIDs have a UGA email address assigned Can be an account used for departmental purposes (ex. helpdesk@uga.edu) Automatically assigned for incoming students, but need to be requested for faculty, staff, and other affiliates Available for faculty, staff, students, and other UGA affiliates. More information can be found at myid.uga.edu 5 What is a UGA ID? • A 9-digit number used as a personal identifier. It was previously • • • • • referred to as the UGA CAN. A number that starts with 81 (such as 810 or 811). Automatically issued when a record is created for a new student, faculty, staff, or affiliate. Used as identifying data instead of SSNs in most UGA administrative applications. Printed as part of a card number on your UGACard. Used to look up records and allow access to a building or football games (when used in conjunction with your UGACard) 6 MyID vs. UGA ID • A MyID has a username and password pair used to login to various UGA applications and websites. • Don’t call a MyID “the first part of your UGAMail address,” as email addresses can now be different from MyIDs. • A MyID is closely tied to your email account, while a UGA ID is closely tied to your UGA identity. • UGA IDs are an easy way to communicate which person’s records you are referring to, without using their SSN. • MyID account names can change, UGA IDs rarely change. • UGA IDs are retained, even after someone’s MyID is disabled or unused. 7 MyID Profile Application • Visit myid.uga.edu • With this application, you can: • Change your MyID password • Set your Identification Verification Option to be used for password management if you forget your password: • Secret question/answer pairs • Mobile number • Alternate email address • Add or update your UGAMail email alias (youpick@uga.edu) • Request a departmental MyID (employees only) • Rename your MyID (if your MyID and email address match) 8 Why Set Secret Q/A Pairs? Secret Q/A pairs are used to: • Help verify your identity if you contact various departments via phone. • Access paycheck stubs and W2s on the Employee Self Service website. Having Secret Q/A pairs is a requirement to fully provision your UGA Email address! Please encourage new students and employees to set their Secret Q/A pairs in advance to prevent email issues. 9 Departmental MyIDs • Many departments need a method to communicate with their clients, but don’t want to use an individual’s email address. Departmental MyIDs address this need. Examples are helpdesk@uga.edu or gradinfo@uga.edu • Departmental MyIDs can be shared among staff within a department. • Employees can request Departmental MyIDs through the MyID Profile Application. The link is found under the Requests section. • Departmental MyIDs allow easier transition of communications and information during staff changes. 10 MyID Authentication • To access many sites at UGA, you need to authenticate with your MyID username and password. • Common applications that use MyID accounts for authentication: • UGAMail (put @uga.edu after your MyID as the username) • MyUGA Portal • Athena • Employee Self Service • DegreeWorks • Parking Services • If you forget your MyID password, use a special section of the MyID Profile Application to reset it (www.myidprofile.com/reset). This link and other MyID information is at myid.uga.edu 11 Central Authentication Service (CAS) • Traditionally, MyID authentication has been handled through a system call EDS. The login screens for systems using EDS can look very different since they are managed by the department running the application. • EITS is encouraging application developers to use the Central Authentication System (CAS) instead of EDS authentication. • CAS offers a simplified authentication method that has a common look across all applications that use it. • Examples of CAS-enabled applications: • MyUGA Portal (includes lynda.com, Skillsoft, etc.) • Athena • UGA Parking Services • MyID Profile Application 12 CAS Login Page 13 Online Directory and FERPA • Use the ‘Search UGA Sites and for People’ search box on the UGA website to view Online Directory information. • The Email Global Address List (GAL) is another way to find contact information for UGA students, employees, and affiliates. • If a student enables their FERPA restrictions, they are removed from the Online Directory and the Global Address List. • Removal from the Global Address List impacts: • Displaying contact information using GAL or UGAMail searches • Displaying calendar information to others using Calendar searches • This is a common problem for Graduate Assistants or employees that are also students if they enable their FERPA Flag. 14 How Do I Get Help? • The Identity Management (IDM) and email team work to assist with issues involving incorrect identity data, UGA IDs, MyIDs, authentication, or UGAMail access. • Questions for our team can be directed through the EITS Help Desk by calling (706) 542-3106 or emailing helpdesk@uga.edu 15