UT Shield

News

, Filed Under: Announcements, Authentication

Upcoming changes to InCommon SAML Federation

WHAT’S CHANGING?

The Identity and Access Management (IAMIAM Identity and Access Management (IAM) is a set of policies, processes, and technologies designed to ensure that the right individuals (identities) have the right access to resources within an organization. IAM involves managing and securing digital identities, controlling access to systems and data, and maintaining the confidentiality, integrity, and availability of information.) team has been working to consolidate authenticationAuthentication Authentication is the act of determining that a person is who they claim to be. For more information, see our Concepts page. services into one service called Enterprise Authentication and subsequently retire UT Shibboleth by August 2021.

The transition for applications directly integrated with UT Shibboleth through the InCommon Federation will not support a phased approach. The IAM team is working with UT System to coordinate a cutover on a pre-determined date, currently scheduled for Thursday, May 27, 2021.

On the day of the cutover, the University of Texas at Austin’s identity provider in the InCommon Federation will be updated from UT Shibboleth to Enterprise Authentication.

Delays in the propagation of the change may be expected for up to 24 hours. If you manage or utilize an application in the InCommon Federation, you should verify functionality following the cutover.

Additional communications will be sent via distribution list prior to cutover leading up to the May 27, 2021 date. These communications will remind customers of the change and urge them to verify proper service functionality following the change.

IMPACT AND RISK

Applications could experience a brief impact to service availability on Thursday, May 27, 2021 depending on how frequently the application’s metadata is being refreshed. The IAM team anticipates that most applications will be minimally impacted.

WHEN?

This change will take effect on Thursday, May 27, 2021.

ACTION REQUIRED

If your team manages web applications that authenticate using an InCommon Federation integration, you are encouraged to validate login functionality after you receive a confirmation from the IAM team of the completed change on May 27, 2021.

If you experience issues that persist beyond 24 hours post cutover, please reach out to the UT Service Desk.

QUESTIONS?

You may reference the UT Shibboleth to Enterprise Authentication Transition Plan KB article for more information about the UT Shibboleth retirement.

For an overview and general information about InCommon federated identity, please see the InCommon Federation services documentation

If you have any further questions or need technical assistance, please contact the UT Service Desk at 512.475.9400 or help@utexas.edu.

, Filed Under: Authentication, Enterprise Authentication Changelog

Change Log – Enterprise Authentication – v20210308204439

  • Performed regression testing of the most recent tag (4.0.1_20210302) of the InCommon Trusted Access Platform (TAPTAP The InCommon Trusted Access Platform (TAP) is an identity and access management suite of software.) Shibboleth Identity Provider (IdPIdP An Identity Provider (IdP) is a software tool or service that offers user authentication as a service. The IdP manages the user's primary authentication credentials and issues assertions derived from those credentials. At UT Austin, the primary IdP used to authenticate the UT EID and EID Password is Enterprise Authentication, which is managed by the IAM Team. For more information, see our Concepts page.) image.
  • Updated Enterprise AuthenticationAuthentication Authentication is the act of determining that a person is who they claim to be. For more information, see our Concepts page. to use tested tag.
  • Removed unused data from image

, Filed Under: Group and Role Management, SailPoint IIQ Release Notes

Release Notes – SailPoint IdentityIQ (IIQ) – Version 2021.2.1

On Wednesday, February 10, 2021 the IAMIAM Identity and Access Management (IAM) is a set of policies, processes, and technologies designed to ensure that the right individuals (identities) have the right access to resources within an organization. IAM involves managing and securing digital identities, controlling access to systems and data, and maintaining the confidentiality, integrity, and availability of information. Team released SailPoint IdentityIQ (IIQIIQ SailPoint IdentityIQ (IIQ) is a group- and role-based authorization management service. See Identity Lifecycle Management for more information.) version 2021.2.1 which implemented the following changes:

  • Implement a new ADAD Active Directory (AD) is a directory service from Microsoft which implements Internet standard directory and naming protocols. See Austin Active Directory (Austin AD) in the service catalog for the University’s local implementation. group for the Academic Information Systems department.

, Filed Under: Group and Role Management, SailPoint IIQ Release Notes

Release Notes – SailPoint IdentityIQ (IIQ) – Version 2021.2.0

On Wednesday, January 13, 2021 the IAMIAM Identity and Access Management (IAM) is a set of policies, processes, and technologies designed to ensure that the right individuals (identities) have the right access to resources within an organization. IAM involves managing and securing digital identities, controlling access to systems and data, and maintaining the confidentiality, integrity, and availability of information. Team released SailPoint IdentityIQ (IIQIIQ SailPoint IdentityIQ (IIQ) is a group- and role-based authorization management service. See Identity Lifecycle Management for more information.) version 2021.2.0 which implemented the following changes:

  • Performance improvements.

, Filed Under: Announcements, Directory Services

UT Directory now requires log in with UT EID starting Dec. 14

The Identity and Access Management Team is re-posting the following communication from the university’s Information Security Office to campus staff.

Dear Colleagues,

The UT Directory, also known as the University White Pages Directory, now requires login with UT EIDUT EID The University of Texas Electronic Identity (UT EID or EID) is the public records identifier for principals at the university. See our Concepts page for more information. and password and Duo for multifactor authenticationAuthentication Authentication is the act of determining that a person is who they claim to be. For more information, see our Concepts page. and is only accessible to members of the university community.

This change is intended to increase security and privacy and combat aggressive data mining from outside organizations for the purpose of socially engineering phishing and vishing scams that target members of the university community. When Duo for multi-factor authentication was applied to most UT services in May 2020, attempts to phish credentials related to Duo increased with the goal of compromising the user’s account. Visit the ITS project page for more information.

Employees can reference the Change Information in the University Directory article in the askUS Knowledge Base for more information on UT Directory data.

A similar message has been sent to students. Students may contact Texas One Stop for help updating their personal information in the UT Directory.

Any university community member with an EIDUT EID The University of Texas Electronic Identity (UT EID or EID) is the public records identifier for principals at the university. See our Concepts page for more information. can find or reset their EID, manage their password, and get other forms of help with their EID by visiting the UT EID Self-Service Tools page.

What is phishing?

The act of sending an email to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft is called “phishing

What is vishing?

Vishing is when you receive a call from someone, either a real person or an automation, encouraging you to take an action or give them sensitive data.

For more information on protecting your data, visit the Information Security Office website, https://security.utexas.edu/

Information Security Office
The University of Texas at Austin
security@utexas.edu
https://security.utexas.edu