CSU System Single Sign-On Announcement

CSU System Single Sign-On (SSO)

This article stores information contained in a CSU IT Community email shared on June 26, 2024, regarding a planned update for the new CSU System Identity Provider.

Title: Action Needed: IdPs Changing to Single IdP, System Branding

CSU IT Community,

Starting on Tuesday, July 2, 2024, CSU’s Net ID login page (used for single sign-on) will get a facelift, giving it a cleaner, modern look, while simplifying the process down to one click for all users across the CSU System (screenshot of new page at bottom of email).

What's Changing

Currently, there are two CSU-system Identity providers (IdPs) managed by CSU’s IAM team:
- Fort Collins (domain shibidp.colostate.edu)
- Pueblo (domain csupidp.csupueblo.edu)
As part of CSU System IT Alignment, the Fort Collins IdP is will be rebranded as a CSU System IdP
- Rebranding will change the appearance of the login interface but will not change the IdP domain or any of its existing Single Sign-On (SSO) configurations
- The values used for username & password (NetID & password) will not change
As part of CSU System IT Alignment, we are going to merge configurations from the Pueblo IdP into the [new] CSU System IdP
- These configurations will require work, from primarily CSU’s IAM and Pueblo IT staff, to begin using the new CSU System IdP

Actions Needed

Determine if any of your sites currently offer SSO to both campuses via both, separated, IdPs
Contact CSU’s IAM if help is requested to update login pages to use single CSU Campus IdP
- Freshservice SSO Support Request Form
For your applications, prepare to update any login links’ display text to reference the “CSU System <Login>” in place of “CSU Fort Collins <Login>” where applicable
Communicate with stakeholders of your services as you see fit
Communicate any issues to IAM team, should they arise during this process.
Most Fort Collins services that use SSO will not need to perform any work. Work would be required if:
- The app’s login links’ text needs to be updated for the CSU System
- The service currently offers SSO through both Fort Collins & the Pueblo IdPs (e.g. the NetID self-service website). These applications will need to be updated to instead provide SSO through the new, single, CSU System IdP
Note for InCommon services and applications: Users from both campuses will need to begin selecting a new “CSU System” identifier when prompted to “Please choose your home organization” from any InCommon application’s Federation Discovery Service.”

We appreciate your support and patience as we perform this work; your engagement will help us to keep services as reliable as possible.

Pictured: New login interface for SSO, going live July 2, 2024