Identity Manager - Accounts Overview

Last Updated: 03/11/2014

Account Terms

Identity Manager uses terms that you should familiarize yourself with.

Primary

  • A primary account is your primary personal account. 

Secondary

  • There also may be secondary accounts in Identity Manager associated with a primary account. For example, Ralphie Buffalo has an IdentiKey (ralphclub) for his club's email address. This is referred to as a group or entity account. Identity Manager refers to accounts like this as secondary accounts.

Refer to the information below to understand Identity Manager's impact on different account types.

Account Types

Primary

  • A primary account is your primary personal account. So Ralphie Buffalo's primary account is his IdentiKey, buffalor and his personal CU-Boulder email address buffalor@colorado.edu.

Secondary

  • There also may be secondary accounts in Identity Manager associated with a primary account. For example, Ralphie Buffalo has an IdentiKey (ralphclub) for his club's email address. This is referred to as a group or entity account. Identity Manager refers to accounts like this as secondary accounts.
  • When logged into Identity Manager with your primary account, you can view your secondary accounts on the View My Accounts page.
  • New secondary accounts will be activated inside Identity Manager through the primary account holder. This is done by clicking on the Activate My Secondary Account(s) link inside of Identity Manager.
  • Some secondary accounts, like group accounts, can be managed with Identity Manager as well.
  • Reset or change a secondary account password by logging into Identity Manager with the secondary account's CU Login Name and IdentiKey password.
  • If a secondary account does not have an IdentiKey it cannot be managed through Identity Manager even though it may show up on the View My Accounts Page. List proc accounts are an example of a secondary account that cannot be managed in Identity Manager. For assistance with accounts like this, contact the IT Service Center.
AD (Active Directory) Accounts

Description:

  • Used to access resources like OIT's Exchange email service.

With Identity Manager:

  • All OIT AD accounts are automatically synchronized with IdentiKey accounts.
  • The tool 'AD Sync' was disabled in 2009.
  • Having different AD and IdentiKey passwords is no longer possible.
  • CTL-ALT-DEL password change functionality is no longer possible.
  • Other AD accounts:
    • Check with your AD administrator if you have questions.
Group Accounts

Description:

  • Usually used for generic email address, departments and clubs.

With Identity Manager:

IdentiKey

Description:

  • Your key to many campus resources, like D2L and VPN

With Identity Manager:

  • Primary account.
  • Used to authenticate into Identity Manager
  • Identity Manager used to activate new IdentiKeys
  • Perform password changes and resets.
  • Manage email address associated with sponsored account.
ListProc Accounts

Description:

  • An email list with a list owner and subscribers.

With Identity Manager:

  • Secondary account, associated with the list owner's primary account.
  • Shows up on the View My Accounts page inside of Identity Manager.
  • Cannot be managed with Identity Manager since there is not an IdentiKey associated with the list.
  • Learn more about list management
OIT Unix Accounts

Description:

  • Accounts on spot, rintintin, etc.

With Identity Manager:

  • Not affected and managed through Identity Manager.
Retiree

Description:

  • A CU Login Name and IdentiKey password maintained by a retiree.

With Identity Manager:

  • Primary account.
  • Used to authenticate into Identity Manager
  • Identity Manager used to activate new IdentiKeys
  • Perform password changes and resets.
Sponsored Accounts

Description:

  • A CU Login Name and IdentiKey password given to a sponsored affiliate

With Identity Manager:

  • Primary account.
  • Used to authenticate into Identity Manager
  • Identity Manager used to activate new IdentiKeys
  • Perform password changes and resets.
  • If applicable, manage email address associated with sponsored account.