Accounts: Difference between revisions

From UMIACS
Jump to navigation Jump to search
 
(32 intermediate revisions by 5 users not shown)
Line 1: Line 1:
This page outlines the various account types at UMIACS and their management methods.
This page outlines the various account types at UMIACS and their management methods.
'''Do not share any UMIACS-affiliated account for any purpose. Action may be taken against shared accounts.'''


==UMIACS Account==
==UMIACS Account==
A traditional UMIACS account consists of the following components:
A full UMIACS account consists of the following components:
; [[ActiveDirectory | Active Directory Account]]
; [[ActiveDirectory | Active Directory Account]]
: Provides access to UMIACS-supported computers, email, secgroup controlled resources, web services, and the VPN.
: Provides access to UMIACS-supported computers, [[SecGroups | secgroup]] controlled resources, web services such as [[GitLab]], and the [[VPN]].
; [[Jira | Jira Account]]
; [[Jira | Jira Account]]
: Provides access to the JIRA Request Tracker. Please note that it is possible to set a separate password for this account, at which point it will no longer be synced from your Active Directory Account. Changing your Jira password DOES NOT change your Active Directory Account password.
: Provides access to the JIRA Request Tracker. Please note that it is possible to set a separate password for this account, at which point it will no longer be synced from your Active Directory Account. Changing your Jira password DOES NOT change your Active Directory Account password.
Line 10: Line 12:
==Guest / Collaborator Account==
==Guest / Collaborator Account==
; [[Accounts/Collaborator | Collaborator Accounts]]
; [[Accounts/Collaborator | Collaborator Accounts]]
: Sponsored account to provide temporary access to UMIACS Web Services for non-UMIACS collaborators.
: Sponsored account to provide access to UMIACS Web Services for non-UMIACS collaborators.


==Request a UMIACS account==
==Request a UMIACS account==
Fill out the account request form located at the [https://intranet.umiacs.umd.edu/requests/accounts/new UMIACS Account Request webapp].  Please note that for the PI field you will be entering your PI/Professor/Sponsor's account name here at UMIACS.  Also indicate any labs you are a member of in the notes field to speed up access to your lab's resources.  
Fill out the account request form located at the [https://intranet.umiacs.umd.edu/requests/accounts/new UMIACS Account Request webapp].  Please note that for the PI field you will be entering your PI/Professor/Sponsor's account name here at UMIACS.  Also indicate any labs you are a member of in the notes field to speed up access to your lab's resources.  


Once the form is submitted, it will return to you your initial password for your accounts, please keep itIf you forget your password, you can always come to the UMIACS Helpdesk in 3142 AVW with a photo ID to reset it.  Accounts can take anywhere from a few hours to a day for installation, depending on how quickly your PI approves your account.
Once the form is submitted, it will send an email with a link to verify your email addressYou must click this link to verify your email address before the system will send email to your PI to review the account request.  Accounts can take anywhere from a few hours to a day for installation, depending on how quickly your PI approves your account.


==Password Requirements==
==Password Requirements==
Line 27: Line 29:
** Unicode characters
** Unicode characters
* Password cannot contain (or match a substring of 3+ sequential characters) of your username or any part of your first or last name.
* Password cannot contain (or match a substring of 3+ sequential characters) of your username or any part of your first or last name.
* Password was not previously used in last 5 passwords.
* Password was not previously used in your last 10 passwords.
* Password was not previously changed in the last 2 days.
* Password has not been [[CompromisedPasswordFiltering | compromised]] in a known data breach.
 
It is your responsibility to secure your password. Please choose a strong password, do not use your UMIACS password for any other service, and only connect using secure protocols.


It is your responsibility to secure your password. Please try to choose a strong password and use secure protocols.
UMIACS staff members do not store your password in a retrievable format, so if you forget your password, you must reset it (next section).


==Changing account password==
==Changing account password==
===If you know your current password===
===If you know your current password===
# The [https://intranet.umiacs.umd.edu/password UMIACS Password Web Application] can be used to change the password for UMIACS and UMIACS Collaborator accounts.
# You can use the [https://intranet.umiacs.umd.edu/password UMIACS Password Web Application] to change your password.


===If you do not know your current password===
===If you do not know your current password===
# Stop by the UMIACS Help Desk in room 3142 A.V. Williams Building with a photo ID.
# You can [https://intranet.umiacs.umd.edu/password/forgot reset your password yourself] if you know your username and have already registered a mobile phone number and alternate E-mail address in our [https://intranet.umiacs.umd.edu/directory/info/ Directory Application].
#* If you are unable to physically stop by the UMIACS Help Desk, you can have your Account sponsor stop by the UMIACS Help Desk to reset the password on your behalf.  The account sponsor will then be responsible to conveying the password to you in a secure manner. (i.e. Telephone, where they could identify you by voice)
# If your account was a UMIACS Collaborator Account, your password can be reset by your sponsor via our [https://intranet.umiacs.umd.edu/requests/accounts/collaborators/ Requests Application].
# You can stop by the UMIACS Help Desk in room 3109 Iribe Center with a photo ID.
#* If you are unable to physically stop by the UMIACS Help Desk, you can have your account sponsor (PI) work with the UMIACS Help Desk to receive a temporary password on your behalf.  The account sponsor will then be responsible for conveying the password to you in a secure manner. (e.g., Telephone, where they could identify you by voice)
 
==Sponsored Accounts==
You can view a list of the accounts you sponsor in the [https://intranet.umiacs.umd.edu/requests/accounts/sponsored/ UMIACS Account Management Web Application]. Clicking on an account's display name will bring you to a management page where you can see details such as the installation date or email forward. From here you can edit your relationship to the account.
 
You can also request to remove your sponsorship or modify the expiration date, but these require staff action and are not immediate.


==All Accounts Related Pages==
==All Accounts Related Pages==
{{Special:PrefixIndex/Accounts/}}
{{Special:PrefixIndex/Accounts/}}

Latest revision as of 19:10, 15 October 2024

This page outlines the various account types at UMIACS and their management methods.

Do not share any UMIACS-affiliated account for any purpose. Action may be taken against shared accounts.

UMIACS Account

A full UMIACS account consists of the following components:

Active Directory Account
Provides access to UMIACS-supported computers, secgroup controlled resources, web services such as GitLab, and the VPN.
Jira Account
Provides access to the JIRA Request Tracker. Please note that it is possible to set a separate password for this account, at which point it will no longer be synced from your Active Directory Account. Changing your Jira password DOES NOT change your Active Directory Account password.

Guest / Collaborator Account

Collaborator Accounts
Sponsored account to provide access to UMIACS Web Services for non-UMIACS collaborators.

Request a UMIACS account

Fill out the account request form located at the UMIACS Account Request webapp. Please note that for the PI field you will be entering your PI/Professor/Sponsor's account name here at UMIACS. Also indicate any labs you are a member of in the notes field to speed up access to your lab's resources.

Once the form is submitted, it will send an email with a link to verify your email address. You must click this link to verify your email address before the system will send email to your PI to review the account request. Accounts can take anywhere from a few hours to a day for installation, depending on how quickly your PI approves your account.

Password Requirements

We have the following policies in regards to our ActiveDirectory passwords:

  • Minimum Password Length : 8 Characters (more is allowed)
  • Minimum Character Classes : 3 Character Classes
    • English uppercase characters (A - Z)
    • English lowercase characters (a - z)
    • Base 10 digits (0 - 9)
    • Non-alphanumeric (For example: !, $, #, or %)
    • Unicode characters
  • Password cannot contain (or match a substring of 3+ sequential characters) of your username or any part of your first or last name.
  • Password was not previously used in your last 10 passwords.
  • Password was not previously changed in the last 2 days.
  • Password has not been compromised in a known data breach.

It is your responsibility to secure your password. Please choose a strong password, do not use your UMIACS password for any other service, and only connect using secure protocols.

UMIACS staff members do not store your password in a retrievable format, so if you forget your password, you must reset it (next section).

Changing account password

If you know your current password

  1. You can use the UMIACS Password Web Application to change your password.

If you do not know your current password

  1. You can reset your password yourself if you know your username and have already registered a mobile phone number and alternate E-mail address in our Directory Application.
  2. If your account was a UMIACS Collaborator Account, your password can be reset by your sponsor via our Requests Application.
  3. You can stop by the UMIACS Help Desk in room 3109 Iribe Center with a photo ID.
    • If you are unable to physically stop by the UMIACS Help Desk, you can have your account sponsor (PI) work with the UMIACS Help Desk to receive a temporary password on your behalf. The account sponsor will then be responsible for conveying the password to you in a secure manner. (e.g., Telephone, where they could identify you by voice)

You can view a list of the accounts you sponsor in the UMIACS Account Management Web Application. Clicking on an account's display name will bring you to a management page where you can see details such as the installation date or email forward. From here you can edit your relationship to the account.

You can also request to remove your sponsorship or modify the expiration date, but these require staff action and are not immediate.

All Accounts Related Pages