Identity & Access Management

Federated Identity Service is an IdentiKey login system placed in front of some Federated web services. Log in with your IdentiKey when you see Federated Identity Service and follow the on-screen steps. When you jump from service to service that uses Federated Identity Service, you'll only have to sign in once for the duration of your session.

Background: Campus Computing Accounts (IdentiKey) are created automatically and updated based on information that is stored in University Enterprise Source Systems, HCM and CU-SIS. It is increasingly important that those source system records exist as numerous other university organizations provide IT Services and often operate across organizational lines. We strongly recommend utilizing “Person of Interest” records in HCM to reflect non-payroll service needs as this creates data these providers can reference consistently.

Features

IdentiKey Manager is a web-based service that allows you to manage your CU Boulder online identity. This is where you can change your IdentiKey password, manage your email address, choose your display name and more:

Identity and Access Management (IAM) is about linking persons and systems to campus services and data resources. IAM services are about identifying persons, their relationship(s) to the university and campus, and facilitating their access to the resources that their roles and relationships require. The key components in these services are authoritative person data, user (account) services that connect people to applications and resources, authentication (ensuring that you are who you say you are) and authorization (confirming that you are permitted or entitled to do these things.)

IAM services rely on trustworthy university data (Campus Solutions and HRMS records) to identify faculty, staff, students and other campus community members and to provide information and some level of assurance that these persons are who they say they are. IAM services are influenced heavily by the content of this university "source" data and are subject to data appropriate use and security policies and procedures.