Title Created Resolved
Service Maintenance: Microsoft Exchange Friday, May 24, 2013 - 10:00pm Friday, May 24, 2013 - 11:59pm VIEW
Service Maintenance: UCB Files Friday, May 24, 2013 - 10:00pm Friday, May 24, 2013 - 11:59pm VIEW
Service Maintenance: Mediasite Classroom Capture Saturday, May 25, 2013 - 6:00am Saturday, May 25, 2013 - 6:00pm VIEW
Service Maintenance: Router Upgrade (Network Outages) Thursday, May 30, 2013 - 6:00am Thursday, May 30, 2013 - 7:00am VIEW
Subscribe to Service Alerts

Identity Manager - Accounts Overview

Last Updated: 04/27/2011

Account Terms

Identity Manager uses terms that you should familiarize yourself with.

Primary

  • A primary account is exactly as it sounds. It is your primary personal account. So Ralphie Buffalo's primary account is his IdentiKey, buffalor and his personal CU-Boulder e-mail address buffalor@colorado.edu.

Secondary

  • There are also secondary accounts in Identity Manager, and these are associated with a primary account. For example, Ralphie Buffalo has an IdentiKey (ralphclub) for his club's website. This was formerly called a group or entity account. Identity Manager refers to accounts like this as secondary accounts.
  • When logged into Identity Manager with your primary account, you can view your secondary accounts on the View My Accounts page.
  • New secondary accounts will be activated inside Identity Manager through the primary account holder. This is done by clicking on the Activate My Secondary Account(s) link inside of Identity Manager.
  • Some secondary accounts, like group accounts and conference IdentiKeys, can be managed with Identity Manager as well.
  • Reset or change a secondary account password by logging into Identity Manager with the secondary account's CU Login Name and IdentiKey password.
  • If a secondary account does not have an IdentiKey it cannot be managed through Identity Manager even though it may show up on the View My Accounts Page. List proc accounts are an example of a secondary account that cannot be managed in Identity Manager. For assistance with accounts like this, contact the IT Service Center.

Refer to the information below to understand Identity Manager's impact on different account types.

Account Types

AD (Active Directory) Accounts

Description:

  • Used to access resources like OIT's Exchange e-mail service.

With Identity Manager:

  • All OIT AD accounts are automatically synchronized with IdentiKey accounts.
  • The tool 'AD Sync' was disabled in 2009.
  • Having different AD and IdentiKey passwords is no longer be possible.
  • CTL-ALT-DEL password change functionality is no longer be possible.
  • Other AD accounts:
    • Check with your AD administrator if you have questions.
Conference IdentiKey

Description:

  • A single CU Login Name and IdentiKey password used by many attendants at a conference.

With Identity Manager:

  • Secondary account, associated with one primary account holder.
  • Can be managed with Identity Manager by logging in with the account's CU Login Name and IdentiKey password.
  • New conference IdentiKey requests must still be submitted to the IT Service Center and then activated by the primary account holder inside of Identity Manager.
Group Accounts

Description:

  • Usually used for generic e-mail address, departments, clubs, and managing websites.

With Identity Manager:

IdentiKey

Description:

  • Your key to many campus resources, like CUConnect and VPN.

With Identity Manager:

  • Primary account.
  • Used to authenticate into Identity Manager
  • Identity Manager used to activate new IdentiKeys
  • Perform password changes and resets.
  • Manage e-mail address associated with sponsored account.
ITS Unix Accounts

Description:

  • Accounts on spot, rintintin, etc.

With Identity Manager:

  • Not affected and managed through Identity Manager.
ListProc Accounts

Description:

  • An e-mail list with a list owner and subscribers.

With Identity Manager:

  • Secondary account, associated with the list owner's primary account.
  • Shows up on the View My Accounts page inside of Identity Manager.
  • Cannot be managed with Identity Manager since there is not an IdentiKey associated with the list.
  • Learn more about list management.
Retiree

Description:

  • A CU Login Name and IdentiKey password maintained by a retiree.

With Identity Manager:

  • Primary account.
  • Used to authenticate into Identity Manager
  • Identity Manager used to activate new IdentiKeys
  • Perform password changes and resets.
  • If applicable, manage e-mail address associated with sponsored account.
Sponsored Accounts

Description:

  • A CU Login Name and IdentiKey password given to a sponsored affiliate

With Identity Manager:

  • Primary account.
  • Used to authenticate into Identity Manager
  • Identity Manager used to activate new IdentiKeys
  • Perform password changes and resets.
  • If applicable, manage e-mail address associated with sponsored account.