Archives

Weblogin

"" Overview and Key Features:

Weblogin is the web single sign-on service, which is used by hundreds of University service providers to provide authentication via UTORid/password. It also provides ‘coarse-grained’ authorization attributes such as affiliation and email address, which can be used by services to create and maintain local accounts and restrict access. Weblogin uses Shibboleth as the underlying technology.

  • Federated access

The University’s Weblogin service is integrated with the Canadian Access Federation, a Canada-wide service that provides access to Canadian and worldwide services, including:

  • Weblogin access integration with other Canadian higher-ed services.
  • University of Toronto services access via other Canadian institution access systems.
  • Integration with eduGAIN, a service that extends the Canadian higher-ed federated capability to educational institutions in the United States and across the world.

""  Getting Started:

Access the Weblogin service

  • Users:

For information on using federated login services, visit the CANARIE website or contact Information Security.

  • Technical staff:

To implement Weblogin, refer to “Installing and configuring Shibboleth”, and “SAML attributes available from Weblogin”.

""   Get Help:

For Weblogin issues, contact your local help desk.

Preferred name (display first name)

"" Overview and Key Features:

Members of the University of Toronto community often have a first name other than an official name that they use to identify themselves to others. Recognizing this, U of T allows students, faculty and staff to set and use their preferred first name.

Differentiating between the preferred and official first names allows the University to enable individual preference in applications that do not have a requirement to use official names. The preferred name option enacts the adoption of a consolidated preferred name across the University’s IT infrastructure.

The preferred name service was previously known as display first name.

""  Getting Started:

Access the preferred name service.

  • How to use:

To change your preferred name, log in to the preferred name service page and follow the prompts.

  • Application owners:

If you’re an application owner, learn how to consume preferred name information from Shibboleth.

""   Get Help:

Questions about selecting a preferred name

Students should contact their registrar’s office and employees should contact their divisional human resources office.

Directory and Authentication Services

""   Overview and Key Features:

Enterprise Active Directory (EAD) is a platform that provides authorization, roles and group services. It is a central database containing users’ information that is used for authentication and authorization. EAD is integrated into almost all major computing systems in the University and provides access to services such as Office 365.

There is no specific front-end usage of EAD. What it does remains transparent while it authenticates and authorizes you to access services – no action is needed from users. For additional information about EAD, see the Enterprise Service Centre Knowledge Base.

""   Getting Started:

There are over 65 separate instances of active directories within U of T. If you are managing one of these instances and would like to integrate with EAD, please submit a ticket through the Enterprise Service Centre to discuss your application.

""   Get Help:

EAD is managed and maintained by the Identity and Access Management (IAM) team. To contact IAM about EAD, please create a ticket through the Enterprise Service Centre.

There is a mailing list for EAD, which is used to send messages about the bi-monthly update meeting. To subscribe, send an email containing “SUBSCRIBE ENTERPRISEAD-L” in the message body to listserv@listserv.utoronto.ca.

Group Management Service (UTORGrouper)

""   Overview and Key Features:

UTORGrouper is the controlling authority for groups at UofT. Grouper simplifies group management by allowing you to delegate group management or visibility. Grouper enables you to manage your unit’s access groups centrally and have them flow to other services.

 

Help - Free computer icons   Getting Started:

If you’re an application administrator and need help connecting to Grouper, email utorgrouper.admin@utoronto.ca to create an ESC ticket. You’ll get an autoreply with a link to the ticket.

Useful Guides: 

Grouper currently handles approximately 100 applications, with many more expected to be added over time. Your first point of contact for help is the application administrators or your help desk.

If you’re an application administrator and need help connecting to Grouper, email utorgrouper.admin@utoronto.ca to create an ESC ticket.

Institutional Identity and Login (UTORid)

""   Overview and Key Features:

The UTORid (along with a password) is a user identifier used to access many University of Toronto services. Some applications requiring the UTORid include:

   

Help - Free computer icons   Getting Started:

   

Question mark - Free communications icons   Get Help:

To troubleshoot issues with your JOINid or UTORid, see articles on the Help Desk Knowledge Base before contacting support.

Information Commons Help Desk

Identity Management Service (UTORauth)

""   Overview and Key Features:

UTORauth is the University of Toronto’s authorization and authentication database. It is the central capability for managing identities and role-based access authorization to U of T resources.

UTORauth works in three ways:

  1. Identification – each person with a relationship to U of T is given central identifiers.
  2. Authentication – UTORauth uses identifiers, such as the UTORid, for validation.
  3. Authorization – UTORauth determines what users are authorized to do based on their roles.

For detailed information about UTORauth functionality, see the Enterprise Service Centre (ESC) article “UTORauth: How it works”.

 

Help - Free computer icons   Getting Started:

Administrative tools

UTORauth provides a set of tools for administrative staff to manage and obtain lists of UTORids and barcodes. An overview of these tools, as well as further information specific to each tool, is located in the ESC Knowledge Base article “UTORauth: Administrative tools”.

Resources

Question mark - Free communications icons   Get Help:

For UTORauth inquiries or technical support, email utorauth@utoronto.ca to create an ESC ticket.

Multi-Factor Authentication (MFA)

Product overview - Free business icons   Overview and Key Features:

UTORMFA is the University of Toronto’s multi-factor authentication solution. It verifies your identity using a second factor, like a mobile device or hardware token, to ensure that only you can log in to your account. Users must self-enrol in UTORMFA to access University web services, such as academic course selection.

All students, staff and faculty must enrol in DUO multi-factor authentication in order to access University web systems. Online self-enrolment takes 5-10 minutes and requires you to have a smartphone nearby with an active phone number.

 

Help - Free computer icons   Getting Started:

 

""   Get Help:

  • UTORMFA FAQs

For End Users:

Learn about UTORMFA on the Enterprise Service Centre (ESC).

For Staff:

University staff seeking UTORMFA integration with their systems may find additional guides on ESC: