Shibboleth Service Provider

Single Sign-On Authentication through InCommon Resources Being a member of the InCommon Federation enables CSU System users to access a network of shared authentication and authorization services across a range of institutions and resources. On January 6, 2025, users will begin to experience a change to this login experience. What’s changed? Updated login name in InCommon Resources On broader-serving websites that aren’t managed by the CSU System (like library cataloging services, research websites, and other institutions that share content with our campus) you’ll start seeing Colorado State University System in place of Colorado State University or Colorado State University Pueblo, along with a new logo when prompted to log in. See the below screenshots for an example: Before change (research.gov example) After change (research.gov example) Applicable To Fort Collins, Pueblo, Spur, System Researchers, Students, Faculty, Staff, Guests, Community Recommended Actions Double-check any saved logins in your password managers. Since the domain of the Identity Provider (IdP) changes with the new federation, browser password managers may not recognize the new login page. Manually update your saved credentials in your password manager for the Colorado State University System login page to avoid disruptions. Related Articles CSU System Single Sign-On Announcement InCommon Federation What is Single Sign-On

CSU System Single Sign-On (SSO) This article stores information contained in a CSU IT Community email shared on June 26, 2024, regarding a planned update for the new CSU System Identity Provider. Title: Action Needed: IdPs Changing to Single IdP, System Branding CSU IT Community,   Starting on Tuesday, July 2, 2024, CSU’s Net ID login page (used for single sign-on) will get a facelift, giving it a cleaner, modern look, while simplifying the process down to one click for all users across the CSU System (screenshot of new page at bottom of email).  What's Changing  Currently, there are two CSU-system Identity providers (IdPs) managed by CSU’s IAM team:  Fort Collins (domain shibidp.colostate.edu)  Pueblo (domain csupidp.csupueblo.edu)  As part of CSU System IT Alignment, the Fort Collins IdP is will be rebranded as a CSU System IdP  Rebranding will change the appearance of the login interface but will not change the IdP domain or any of its existing Single Sign-On (SSO) configurations  The values used for username & password (NetID & password) will not change  As part of CSU System IT Alignment, we are going to merge configurations from the Pueblo IdP into the [new] CSU System IdP  These configurations will require work, from primarily CSU’s IAM and Pueblo IT staff, to begin using the new CSU System IdP  Actions Needed  Determine if any of your sites currently offer SSO to both campuses via both, separated, IdPs  Contact CSU’s IAM if help is requested to update login pages to use single CSU Campus IdP  Freshservice SSO Support Request Form For your applications, prepare to update any login links’ display text to reference the “CSU System ” in place of “CSU Fort Collins ” where applicable  Communicate with stakeholders of your services as you see fit  Communicate any issues to IAM team, should they arise during this process.   Most Fort Collins services that use SSO will not need to perform any work. Work would be required if:  The app’s login links’ text needs to be updated for the CSU System  The service currently offers SSO through both Fort Collins & the Pueblo IdPs (e.g. the NetID self-service website). These applications will need to be updated to instead provide SSO through the new, single, CSU System IdP  Note for InCommon services and applications: Users from both campuses will need to begin selecting a new “CSU System” identifier when prompted to “Please choose your home organization” from any InCommon application’s Federation Discovery Service.”  We appreciate your support and patience as we perform this work;  your engagement will help us to keep services as reliable as possible. Pictured: New login interface for SSO, going live July 2, 2024 

What is Single Sign-On? Single Sign-On (SSO) allows users to log in just once to access multiple protected websites and resources. Shibboleth is the open-source software that CSU uses for single sign-on to authenticate and authorize individual access of protected online resources. CSU resources that are SSO protected include Canvas, RAMweb, TimeClock Plus, Kuali, and more. Applicable to: CSU System, Fort Collins, Pueblo, Spur Faculty, Staff, Students, Affiliates Single Sign-On in the CSU System An example of what you’ll see when accessing an SSO protected page is shown below: Log in screen for CSU Systems, showing the NetID and password fields Logging In When you attempt to access a protected resource, and have not yet logged in, you will be forwarded to the single sign-on page for login. The URL of the login page should begin with “https://shibidp.colostate.edu/”. Do not bookmark this login page URL. It has no information about the destination page and will not work again. Log in with your CSU credentials Students, faculty, staff, and associates log in with their NetID and password. If you are unsure if your password was typed correctly, click the eye icon next to the password box to see the password you typed. CSU Fort Collins community library patrons log in with their 9-character Community ID: review the CSU Libraries: Community Patrons, Alumni & Guests page. If you only want to log in to that one application, uncheck Remember me. Leaving the box checked may allow you to log in to other CSU applications without having to re-enter your NetID and password. Your browser must be set to accept all cookies in order for you to log in. Click Login. Logging Out Your CSU single sign-on session remains active after logging out from a service until you completely exit your web browser or you may be automatically logged out if your session times out after a few hours. Close all windows and tabs in your browser to end your session completely. Additional Resources General Support IT Help Desk Password Help How Do I Recover My NetID Password System Administrators and Web Developers CSU Single Sign-On and Shibboleth Service Provider Resources Request Service and Support: Single Sign-On Configuration For more questions, email iamhelp@colostate.edu.