Title Created Resolved
Service Maintenance: Microsoft Exchange Friday, May 24, 2013 - 10:00pm Friday, May 24, 2013 - 11:59pm VIEW
Service Maintenance: UCB Files Friday, May 24, 2013 - 10:00pm Friday, May 24, 2013 - 11:59pm VIEW
Service Maintenance: Mediasite Classroom Capture Saturday, May 25, 2013 - 6:00am Saturday, May 25, 2013 - 6:00pm VIEW
Service Maintenance: Router Upgrade (Network Outages) Thursday, May 30, 2013 - 6:00am Thursday, May 30, 2013 - 7:00am VIEW
View All

Receive Service Alerts Via E-mail

Subscribe to Service Alerts

CUAccess - How it Works

Last Updated: 10/19/2012

Setting it up

Visual related to setting up CUAccess

  1. CUAccess agent is installed on customer's web server. This will serve as the link between the web server and the CUAccess service.
  2. The website's designated contact works with OIT Escalated Support to set policies and determine role based access. OIT will handle the administration of policies and access control.

Customer experience

how works

  1. A user (via a web browser) requests a web page stored on the customer's web server.
  2. The CUAccess agent determines if access to this page is restricted. If it is not restricted, the user receives the web page. If the page is restricted, the user is presented with a login page requesting his/her CU Login Name and IdentiKey password.
  3. The user logs in with their CU Login Name and IdentiKey password.
  4. This information is sent back to CUAccess and verified with the Kerberos Authentication Server.
  5. The Enterprise Directory is checked to verify that the user is currently affiliated with CU-Boulder and any additional information needed about the user is queried at this time.
  6. The CUAccess decision is passed back to the agent and the user is a) allowed access, b) denied access, or c) required to provide additional information.