Identity and Access Management at CGU

In 2010 CGU launched its first Identity and Access Management initiative when we adopted CampusEAI, now Unifyed, for Single SignOn and the MyCampus Intranet Portal. Now, in 2020, we are ready to move to a new system called Azure SSO provided by our longstanding partner, Microsoft. We are very excited about this new stage as we believe it will improve everyone's experience here at CGU, provide flexibility to easily integrate various existing and new software applications offered by CGU as well as, more broadly, The Claremont Colleges Consortium with a significant cost savings potential.

What is IAM?

IAM is an abbreviation for "Identity and Access Management". It applies to software used for creating and deleting accounts, managing passwords, providing single sign on (SSO), and managing authorization (level of access) to systems. Based on people's roles, IAM systems grant them access to the applications to which they are authorized and provides single sign on functionality for those applications (sign in once to visit any application in the SSO ecosystem).

What do I have to do?

For now, the only change for existing students, faculty and staff will be in the way you log into various systems.

How will I reset my password?

Identity systems are designed to allow you to perform self service functions in the case that you forget the credentials to your account. To accomplish this most IAM systems have features in place that allow you to set recovery options on your account such as security questions, recovery phone numbers, and recovery email addresses. In the coming days you will need to set these recovery options back up so that in the future you can recover your credentials should they ever be forgotten. Additional details on how to do this will be provided soon.

Frequently Asked Questions about CGU SSO IAM Migration.

1. What is an IAM system?

IAM is an abbreviation for "Identity and Access Management." It applies to software used for creating and deleting accounts, managing passwords, providing single sign on (SSO), and managing authorization (level of access) to systems. Based on people's roles, IAM systems grant them access to the applications to which they are authorized and provides single sign on functionality for those applications (sign in once to visit any application in the SSO ecosystem).

2. Why are we making a change?

To move to a new modern authentication system administered by Microsoft that supports thousands of existing enterprise and consumer software applications and more modern security features such as Multi-Factor Authentication.

3. Why are we making the change now?

We know that no time is optimal, especially for a change that affects so many people. There are several reasons we chose late July to launch the new system

  • CGU's contract with Unifyed needs to be renewed soon
  • Our project is a one step in the TCC wide project that aims to provide the library with accurate and timely identity data
  • Summer is usually a little slower, allowing us time to concentrate on bigger projects like this one: OIT staff have been working on this project since late last year.

4. Why do I have to set up security questions again?

Why can't you just transfer the information from the old system to the new one?

Good questions! Existing system is unable to export answers to security questions in bulk, so new questions and answers must be created in Microsoft O365. In addition, the new system allows for options other than security questions such as a recovery email or phone number.

5. Will I lose access to anything?

You will not lose access to anything other than the MyCampus password management portal, which will be replaced by equivalent functionality in Microsoft Office 365.

6. Will I have to reset my Duo Multi-Factor Authentication settings?

No, you don't need to change your Duo settings.

7. Do I have to use a different password?

No, you will continue to use the same password but you will sign in with your CGU email address as the username. Nevertheless, it's a good practice to change your passwords every now and then, so this is an opportunity to do so.

8. What will the New Login Procedure look like?

At the moment you login to Office 365 for services such as Outlook or Microsoft Teams by going to 
https://mycampus.cgu.edu, clicking on the Outlook tile, and then you are automatically connected to Outlook.
 

The new changes will allow you to still use the tile after logging into MyCampus, however you will need to login again using your CGU email address as your username and your normal CGU password. Alternatively, you can directly open https://mymail.cgu.edu in your web browser to login to Office 365 without having to login to MyCampus first.
 
This change will be temporary until CGU has completely migrated all applications, at which point you will again see seamless authentication to various applications after logging into the portal.
The new login procedure will look like the following:
 
 
 

EHelp EHelp

Minimize

3 ways to connect

Chat icon


Chat

2. Phone

909-621-8174

3. Email

helpdesk@cgu.edu


OIT Alerts


Staging Enabled