| |
ITS Home >> ITS Help Documents >> ITS Accounts and Servers >> Groups
Overview for Groups (Secondary Accounts)
Group accounts, also known as entity accounts, are usually used for generic e-mail addresses, departments, clubs, and managing websites. The Identity Manager tool calls these accounts "secondary accounts."
Requesting a Secondary Account
- An account must be sponsored by a faculty or a staff member currently affiliated with CU-Boulder. If the account is being requested for a student group, that group must be affiliated with SOFO. Requests for accounts can be made by calling the IT Service Center at 303-735-4357 (or 5-HELP from a campus phone). Usernames can be specified, if the id is not currently in use. Requested user names can be up to 8 characters in length, but numbers, spaces and punctuation marks cannot be used.
- An account is typically good for 2 years, after which is will expire. An e-mail is sent to the account. It can then be renewed or deleted.
Accounts
[Expand/collapse all topics]
What is it:
- An IdentiKey consists of a CU Login Name and a unique password, and is used to authenticate to various computing services at CU-Boulder.
- Secondary IdentiKey accounts do not have the same access privileges that primary user IdentiKeys do, like CUConnect.
- In most instances, secondary IdentiKey accounts are only used to access departmental/club e-mail accounts and website space.
Learn more about IdentiKey, including how to activate at the IdentiKey page.
Who owns it and activates it:
- A secondary account is owned by a CU-Boulder faculty, staff, student, or affiliate.
Activate it:
- To activate a secondary account, the primary account holder must log into Identity Manager with their own credentials.
[Expand/collapse screenshots]
1. To activate a secondary account, like a group account or conference IdentiKey, the primary account holder must log in to https://cuidm.colorado.edu with their personal CU Login Name and IdentiKey password.
2. Once logged in, click on the Activate My Secondary Account(s) link from the main menu.
3. In the next menu, click on the drop-down menu to select the secondary account you want to activate. Note: list proc accounts (i.e. yourlist@lists.colorado.edu) do not need to be activated, so do not select them.
4. Read through the policy and check mark the agreement box. Then click on the Continue button.
5. Next, you will be prompted to answer a set of authentication questions. Select at least three questions to answer. If you ever need to reset the secondary account's IdentiKey password, you will be prompted to answer these questions as part of the authentication process.
6. After you've provided answers to at least three authentication questions, click on the Continue button.
7. Next, you will be prompted to set a password for the secondary account. Pay close attention to the password requirements on the page. If unsuccessful, you will be asked to try again.
8. Once you've set a password that meets the requirements, your account will be activated. Click the Continue button. You will be returned to the main menu.
9. Once activated, you will log in to Identity Manager directly with your secondary account to perform account adjustments.
« Close instructions
Manage it:
- Once the secondary account is activated, you can log in to Identity Manager directly with your secondary account CU Login Name and IdentiKey password to perform account adjustments.
« Close topic
What is it:
- An @colorado.edu e-mail address and a collaborative calendar service.
How to access it:
- You'll use the secondary IdentiKey account (see above) to log in.
- Depending on what the secondary account has access to you may use one of the following. Ask ITS.
Manage it:
- CU-Boulder's Identity Manager allows you to set how your outgoing e-mail address is displayed, create alternate addresses, and adjust where your e-mail is delivered to.
« Close topic
What is it:
- An account on an ITS unix server, like spot.colorado.edu or rintintin.colorado.edu.
- Uses the secondary account's CU Login Name and a unique password, which you choose. You can make this password the same as the secondary account's IdentiKey password.
- Used primarily as an authentication method to manage departmental webpages on www.colorado.edu.
- Can be used as an e-mail delivery destination, and has PINE, IMAP, and POP capabilities. However, it is not ITS's recommended solution for secondary accounts. Click here to learn more.
Manage it:
- To change the secondary account's unix server password login
via a SSH terminal application to the server and type the command passwd. Or contact
the IT Service Center.
« Close topic
What is it:
- An ITS Active Directory (AD) account's username and password is always the same as the secondary IdentiKey account. It synchronizes automatically. So if you change the IdentiKey password, the AD password changes as well.
- ITS Active Directory (AD) accounts are an authentication method used to access various ITS services, like Exchange e-mail, file services, and Microsoft Windows profiles in ITS managed environments.
- Often times, AD accounts are placed in AD groups managed by an administrator. Your membership of an AD group can sometimes determine your ability to access a service that uses AD authentication.
Who gets it:
- Secondary accounts that need access to AD authenticated resources like ITS's Exchange service.
When you get it:
- If the secondary IdentiKey account is activated, the AD account is ready for you when you start using a service like Exchange.
Manage it:
- AD accounts are automatically synchronized with IdentiKey accounts. The only way to change your AD password is to change your IdentiKey password, using Identity Manager.
- If you have questions about a secondary AD account or your ability to access particular ITS services that use AD authentication, contact the IT Service Center.
« Close topic
Get Help
IT Service Center
303-735-4357 (5-HELP)
help@colorado.edu |
|
|
