What is Single Sign-On (SSO)?
Single Sign-On (SSO) is a process in which your username and password give you access to multiple UofG services without requiring you to retype your credentials each time you access a new service. As an example, if you log into Courselink (University of Guelph’s online learning environment), you will be able to schedule your Physics labs, access your Distance Education grades or download software (from UofG’s Software Download) without entering your credentials again despite the fact that these four services are offered by different departments or organizations in geographically different locations. You authenticate with the central SSO service just once and the SSO service will then manage your authentication with other SSO-enabled services behind the scenes until you log out or your SSO session expires.
To further protect University accounts and systems, a new Single Sign-on (SSO) process has been put in place for all U of G and Guelph-Humber accounts. Beginning Feb. 21, 2023, all students, faculty and staff will be directed to sign on through Microsoft’s login page, which will also require users to use multi-factor authentication (MFA) to verify their identity. The main differences to users will be a new look to the login page, as well as a requirement to log in with email@example.com or firstname.lastname@example.org instead of only your username. Those users who do not have a U of G/U of GH email address can also log in this way, by using their U of G central login ID username with @uoguelph.ca or @guelphhumber.ca added to the end.
For Open Learning students who do not have a U of G/U of GH email address, please login to library services (Ares/Omni) by using your U of G central login ID username with @uoguelph.ca or @guelphhumber.ca added to the end. You must also set-up MFA before you can access Mail/library services. See this page for MFA information - https://ithelp.uoguelph.ca/multi-factor-authentication-mfa
Since this switch, some users have been able to login to Courselink but are having password failures for Gryph Mail and library services. If you encounter this issue, you need to change your password and wait 35 minutes for the password change to synch across all systems and this will resolve the issue. Change Password - https://apps.identity.uoguelph.ca/password/change/view.action.
All users will automatically be brought to the new Microsoft SSO page beginning Tuesday, Feb. 21 for the following services only:
- Microsoft Services
- All VPN-protected services
- Course Reserves (ARES)
- Library off-campus Access
It is important to note that while the above services are included in the new SSO process, not all services at U of G/Guelph Humber are included, such as CourseLink and WebAdvisor. There may be times where you are required to log in through both SSO processes depending on the services you are accessing. This will only occur during the transitional period while we move all services requiring a login to the new SSO process.
We keep expanding the list of SSO partners.
SSO is one aspect of Web Access Management - see the WAM section for demos, presentations, and technical details on Access Management, Federation, and SSO. The most recent presentations on the UofG Single Sign On are below (the full listing is in the WAM section):
- COLLABORATE15 conference talk focussing on the Oracle Access Manager technology (solutions, product extensions, lessons learned): session slides and a detailed whitepaper incl. BI Publisher report setup and java REST client development.
- OUCC 2014 presentation on the authentication in the cloud and specifically with Google Apps For Education in PowerPoint or PDF format
- ITSAC presentation on integration GryphMail/Google with SSO (March 13, 2014 meeting)
Before you leave your workstation please log out and close all your browser windows.
NEVER: Reveal your username & password
ALWAYS: Log out & close your browser
Why is it necessary? See the answer.