Tag Archives: IAM Project

New general password tool and Identity & Access Management platform is now live (Jade/Oracle Financials not affected).

Tēnā koutou katoa,

After a long weekend of implementation work by the project team UC’s new IAM solution is in production.

The new method of migrating data allowed the data to be entered into the new environment within the allocated change window.

Testing was successfully completed on staff, student and visitor data, with all tests meeting the required standards.

 

IAM Project
IAM Project

The project team is ready to carry out support of the environment for the next couple of weeks as things settle down.

I would like to thank the project team for their hard work over the weeks building up to today and the long hours worked this weekend.

The UC ITS website pages and links have been updated accordingly.

Where can I get help?

Please contact the IT Service Desk for assistance.

What has changed?

Find out what has changed for students, staff and visitors on the IAM Intranet site.

Note: Jade SMS and Oracle Financials are not affected. Those systems manage passwords themselves. There is no change to how password changes will occur in Jade SMS and Oracle Financials.

Further questions?

If you have any questions regarding the IAM Programme, please do not hesitate to email identityproject@canterbury.ac.nz.

Ngā mihi o te Kirihimete me te Tau Hou | Seasons greetings for Christmas and the New Year

Paul O’Flaherty

Executive Director – Human Resources | Kaihautū Matua Pūmanawa Tangata
IAM Project Sponsor


See previous IAM related communication:

A new general password tool and Identity & Access Management platform is now going live this weekend (Jade/Oracle Financials not affected)

Tēnā koutou katoa,

Due to technical issues outside the control of the UC team the implementation of the new IAM solution was postponed.

The new general password tool, together with the new Identity & Access Management (IAM) platform, will now go live this weekend.

Note: Jade SMS and Oracle Financials are not affected. Those systems manage passwords themselves. There is no change to how password changes will occur in Jade SMS and Oracle Financials.

IAM Project
IAM Project
What is happening?

The IAM platform is replacing the aging and unsupported back end solution of the current IDMS system with the aim to modernise and future proof the IAM solution within UC. This means that the back-end technology will change and a new password tool will be implemented. As a result there will be some technology and process changes for staff, students and visitors.

When is it happening?

The new IAM platform will go live on the weekend of 7 and 8 December 2019.

What does this mean for you?

The upgrade will allow UC to provision accounts and accesses much faster and more accurately than in the past. It also allows UC to integrate with cloud-based solutions in future.

UC staff, students and visitors will use the new general password tool to change their password as required.

The new general password tool will be accessible via the ITS Website and users will be re-directed to an external site with a url name of okta.com.

Existing Staff, students visitors

Existing staff, students and visitors can login with their current user code and password and need to enter the following:

  • a personal email address – mandatory (not shared with other systems) – when added you will receive a confirmation email to this address
  • a mobile phone number – not mandatory (not shared with other systems),
  • and choose a security image (see selection image for an example. Once set the image will be displayed each time you login)

New staff, students, visitors

New staff, student and visitors will be sent a welcome email to their nominated private email address with a link to the new password tool (okta.com) to set their password. They have to enter the same details as above.

Note: Personal email addresses and mobile phone numbers in the new password tool are not shared further and are only held in the password tool for the purpose of an additional source of authentication (i.e. verification email or text message code). The additional source of authentication is used to send either an email or a text message to verify the change/set of the password.

Visit the IAM Intranet site (staff access only) to see in detail what is changing for each group at UC.

Automated email to staff from Okta

This is to let you know that later this week all existing staff and visitors will receive a system generated email from Okta (which is part of the new IAM solution).

Students will have received an email very similar to this over last weekend.

There are no actions required from your side.

The system generated email will look similar to this one:

IAM Okta Automated Email

 

 

Who has been consulted and involved about the changes?

The IAM programme is supported by a technical and non-technical User Reference Group (URG) and the IAM Business Champion Group with more than 140 representatives from across UC who provided feedback and input to the current solution over the past 2 years.

Where can I get help?

Please contact the IT Service Desk for assistance.

If you have any questions regarding the IAM Programme, please do not hesitate to email identityproject@canterbury.ac.nz.

Ngā mihi nui,

Paul O’Flaherty

Executive Director – Human Resources | Kaihautū Matua Pūmanawa Tangata
IAM Project Sponsor


See previous IAM related communication:

 

IAM go-live postponed

Tēnā koutou katoa,

Due to technical issues outside the control of the UC team, the implementation of the new IAM solution has been postponed.

We will communicate again with you when the change is rescheduled.

Automated email from Okta

This is to let you know that later this week all existing staff and visitors will receive a system generated email from Okta (which is part of the new IAM solution).

Students will have received an email very similar to this over the weekend.

There are no actions required from your side.

The system generated email will look similar to this one:

IAM Okta Automated Email

 

 

If you have any questions regarding the IAM Programme, please do not hesitate email us at  identityproject@canterbury.ac.nz.

Thank you for your understanding and continuing support of the IAM project.

Ngā mihi nui,

The IAM Project Team


See previous IAM related communication:

The new Identity & Access Management solution is going live soon

What is happening?

The Identity & Access Management Programme (IAM Programme) is replacing the aging and unsupported back end solution of the current IDMS system.

IAM Project
IAM Project
When is it happening?

The new IAM platform will go live on the weekend of the 23 & 24 November, replacing the current solution.

Who is impacted?

Staff, visitors and students are impacted. Visit the IAM Project Intranet site (staff access only) to see in detail what is changing for each group.

A new password tool is coming!password_tool_iam

Existing staff, visitors and students will use the new password tool to change their password:

  • The new password tool will be accessible via the ITS Website and users will be re-directed to an external site with a url name of okta.com
  • Existing staff can login with their current user code and password and need to enter the following:
    • a second personal email address (not shared with other systems),
    • a mobile phone number
    • and choose a security image
  • New staff, student and visitors will be send a welcome email to their nominated private email address with a link to the new password tool (okta.com) to set a password. They have to enter the same details as above.

Note: Mobile phone number in the new password tool are not shared with anyone or any other systems. They are only held for the purpose of a 2nd authentication factor (i.e. text message code).

Benefits of the new  IAM solution are:

Providing single sign on capability – sign on once for multiple IT applications,

Faster provisioning of default access for new staff, visitors and students,

Enhancing Self-Service – new Assyst tiles for requesting additional access to resources,

The ability to streamline Access Management Services – get access to systems more easily with automation, which can be enhanced in future,

Better protecting identity and access information while the user experience is ensured,

More quickly synchronising password changes with downstream systems,

The solution is adaptable and can grow with the needs of UC,

Integrating new IT systems more easily

If you have any questions regarding the IAM Programme, please do not hesitate to email us at identityproject@canterbury.ac.nz.

Ngā mihi nui

The IAM Project Team


See previous IAM related communication:

What is changing for Department/School Administrators? – IAM Project Update

What is changing for Department/School Administrators, Notification Recipients, and Access Arrangers?

IAM Project
IAM Project

The Identity & Access Management Programme (IAM Programme) is replacing the aging and unsupported back end solution of the current IDMS system with the aim to modernise and future proof the IAM solution within UC.

Visit the IAM Project Intranet site (staff access only) to see what is changing for each group.

By the end of this year a new IAM platform will be implemented, replacing the current solution.

The following changes will be made due to the implementation of the new platform, that will impact Department/School Administrators, Notification Recipients (previously known as IdMS Recipients), and Access Arrangers?

Password
  • Notification recipients will no longer receive initial passwords for new staff and visitors. The password will be directly sent to new staff/visitors nominated email address. If no email address is available the information if flagged with the IT Service Desk. Note: The email confirmation to notification recipients with user code and list of default resources will remain.
  • A new password tool will be implemented (one password tool for everyone where to change your password). Note: Jade SMS and Oracle Financials are not affected at this stage.
Visitors
  • A new Visitor Database (behind the scenes) will be implemented.
  • New visitor records will no longer be entered into UCPeople/PeopleSoft.
  • The Service Request for Visitors (SharePoint form) (UC staff access only) will be integrated to the new visitor database.
  • Visitor Process ownership will change from HR to ITS.
  • Visitors will no longer automatically receive Skype for Business and a Skype for Business phone number. If one is required, it can be requested via Assyst/IT Service Desk.
Provisioning & De-provisioning
  • Automatic provisioning of automatically assigned resources (for new staff, students and visitors).
  • IT account will be disabled midnight of last day of employment/visit.
  • UC Data will be removed – + 30 days after contract/visit end date, + 90 days for students.
  • Identity will be kept for life.
  • New Assyst tile for requesting additional access to resources (e.g. all Staff Mailing Distribution List, additional Network /Drive access etc.).
Other
  • Multi-Factor Authentication (MFA) capability will be enabled.
  • Single sign on capability for multiple IT applications will be enabled.

If you have any questions regarding the IAM Programme, please do not hesitate to email us at identityproject@canterbury.ac.nz.

Ngā mihi nui

The IAM Project Team


See previous IAM related communication: