User account passwords can be managed using a number of tools throughout Campus. This article describes the numerous options and scenarios around account password management.
This article includes the following topics:
Modifying Individual User Passwords
PATH: System Administration > User Security > User > User Account
Individual user account passwords can be manually modified by an Administrator using the User Account tab.
Only System Administrators should have access to the User Account tab.
Image 1: Modifying Individual User Account Passwords
To change your password, select the Reset Password link, enter a New Password and Verify the Password. The box beneath the first password field indicates the strength of the new password with red meaning weak, yellow meaning medium and green meaning strong. Users will not be allowed to save weak or medium (red or yellow) passwords.
Staff members who have proper calendar rights and one of the following:
- Assigned the 'Reset Portal Password' sub-right
Click to see image - Assigned the Student Information System (SIS) product security role
Click to see image - Assigned proper User Account tool rights
Click to see image
have the ability to reset a parent or student's account password by selecting a Reset Password hyperlink found to the right of the Portal Username in the Person Identifiers section of the Demographics tab (see image below).
Suggestions for Creating a Strong Password
Complex, tricky passwords are not always strong passwords and can be difficult to remember. For example, TheBr0wnC@t is a stronger password than !@#$%&() because TheBr0wnC@t uses a combination of character types and is long, whereas !@#$%&() uses only symbols and is short. A computer program can crack !@#$%^&() easier than it can crack TheBr0wnC@t.
When creating a password, consider the following:
- Content - Use a short two or three word sentence as your password.
- Length - Make your passwords long (8-10 characters minimum is usually sufficient).
- Combination - Include letters, punctuation, symbols and numbers.
- Uniqueness - Do not use your username or words found in the dictionary.
Managing Passwords via LDAP Authentication
PATH: System Administration > User Security > LDAP Authentication
User account passwords can also be linked to a district's Active Directory using the LDAP Authentication tool. Schools and districts using LDAP Authentication need to manage and update all user account passwords within their Active Directory.
Districts can enable Password Reset and E-signature if they have LDAP to begin using the Online Meal Benefits Application. LDAP environments will not be affected by enabling Password Reset functionality.
A change to a Campus password is ignored if the account is linked to an LDAP server. The only way to change the login password for an LDAP managed account is to change it on the LDAP server.
Image 2: LDAP Authentication
Managing Passwords via SAML SSO Authentication
PATH: System Administration > User Security > SAML Management
User accounts can authenticated via a SAML SSO IDP (such as Active Directory Federated Services (ADFS)). SAML SSO functionality is enabled and configured in the SSO Service Provider Configuration tool and Campus accounts are tied to SAML SSO authentication via the User Account Type Wizard.
All account passwords and credentials are managed outside of the Campus product by a district's Network Administrator and the IDP.
SAML SSO functionality is currently only available for Hawaii. This functionality is NOT available for general Campus customers.
Image 3: SAML Management Tools
Managing Password Preferences within Portal
PATH: Portal > Change Password; Portal > Account Settings
Portal users can update their account passwords using the Account Settings tool. The Account Settings tool allows users to update their account's existing password, security email address and security image preferences.
Due to recent security changes, the Change Passwords portal option has been removed from Campus. The existing Change Password value has been converted as follows:
- If Change Passwords was marked, the Account Settings tool is available within the Campus Portal, allowing Portal users to change their passwords.
- If Change Passwords was unmarked, the Account Settings tool is NOT available within the Campus Portal. Districts must enable Password Reset functionality in order to activate the Account Settings tool.
Image 4: Account Settings - Portal
For more information, see the Campus Student Portal and Campus Parent Portal articles.
Managing Passwords within Campus
PATH: Account Settings
Non-Portal users can manage their account security preferences using the Account Settings tool. This tool functions differently depending on whether or not your district has enabled Password Reset functionality. See the Account Settings article for more information.
Image 5: Account Settings
Forcing a Password Change for all Student Accounts
PATH: System Administration > User Security > User Preference Management > User Account Batch Wizard
You can force a password change for all students in a school or for a specific set of students using the User Account Batch Wizard. See the User Account Batch Wizard article for more information.
Image 6: Forcing Student Account Password Change
Password-Related System Preferences
PATH: System Administration > Preferences > System Preferences
The Password Reset preference indicates whether or not you have Password Reset functionality enabled. A value of Yes means Password Reset functionality is enabled. This preference cannot be changed once set. This value is established in the Password Reset Configuration tool.
The other preferences within the Account Security Preferences tool are important and should be set up according to your needs but do not directly related to passwords within Campus.
Image 7: Password-Related System Preferences
Enabling Password Reset Functionality
PATH: System Administration > User Security > User Preference Management > Password Reset Configuration
Password Reset functionality is enabled in the Password Reset Configuration tool. This functionality allows Campus application and Portal users the ability to reset their account password as well as manage their account security email address and security preferences without the need for Administrator intervention.
Before enabling Password Reset functionality, consider the following:
- Once enabled it cannot be disabled or reversed.
- Password Reset functionality is only available for accounts authenticated by Campus (not LDAP).
- E-Mail Messenger must be enabled prior to enabling Password Reset functionality.
- Ensure parents are given their own Portal accounts for viewing and managing Portal information. Because each individual Portal account will need to have new security information established once Password Reset functionality is enabled, providing parents with their own account prevents them from having to set up each student Portal account they may log into.
%20(1).png)
Image 8: Password Reset Configuration Tool
To enable Password Reset functionality:
Before you are allowed to enable Password Reset functionality, you must complete the following:
- Enter and save a District Support Phone Number and District Support Email Address in the Support Contact Information tool.
- Establish Messenger Email Settings.
- Enter and save all required fields in the Password Reset Configuration tool.
- Enter Campus User Account Support Advice. This text will appear for users when selecting the Problems logging in? button on the Campus login screen. This text should be used to guide users on the appropriate steps they should take to resolve their Campus account problems.
- Mark the Display phone number on login page checkbox if you would like the District Support Phone Number to appear for users when selecting the Problems logging in? button on the Campus login screen (click the image below to view an example).
- Mark the Display email address on login page checkbox if you would like the District Support Email Address to appear for users when selecting the Problems logging in? button on the Campus login screen (click the image below to view an example).
Select the Save icon. You can now enable access the Enable Password Reset button.
You cannot access the Enable Password Reset button until all required fields are entered and saved.
- Click the Enable Password Reset button. Users will encounter a pop-up message, requiring them to confirm this action. Select OK to enable password reset functionality.
.png)
.png)
Once the Enable Password Reset button is selected and the action is confirmed, the following will occur:
- All passwords will appear hidden within Campus.
- All passwords will be required to be strong passwords. This means all users who do not have a strong password will be required to change their password to a strong password the next time they change their password or use the password reset function.
Password reset functionality also automatically makes the following System Preference/Account Security Preference read-only:
- Password Reset
Existing Users Logging into Campus After Password Reset is Enabled
All users logging into Campus for the first time after Password Reset functionality is enabled are required to enter an Account Security Email address (Image 9). This ensures the password/user name recovery process as well as the account notification process have a valid email address to use.
Image 9: Entering a Security Email Address
Recovering Passwords via the Forgot Your Password Link
If a user is part of a school or district which has Password Reset functionality enabled, they may recover their password using the Forgot Your Password? link (see Image 10).
If the school or district does not have Password Reset functionality enabled, a message will appear informing users of the steps they must take to recover their password (often this means calling the school or district to correct the issue).
Image 10: Forgot Your Password Link
Once the Forgot Your Password? link is selected, enter your Campus username in the field below and click Continue (see Image 11). A message will appear, informing you to check your email (sent to your recovery email address).
It is critical that the Recovery Email address established in the Account Settings tool is valid. Users with an invalid email address will be unable to finish the password recovery process. The recovery email address is established during the initial setting of preferences as well as managed on the Account Settings tool (for Campus users) or Campus Parent Portal.
Image 11: Entering Your User Name
Open the email and select the unique URL provided (Image 12). This will direct you to an editor where you can enter and save a new Campus account password.
Image 12: Example of an Email Containing a Unique Password Reset URL
Enter a New Password (ensuring the password is considered strong), Re-enter the Password, and click the Save button (Image 13).
Image 13: Entering a New Campus Password
Once a new password has been entered and saved, you will receive and email informing you of this change. This email is a safety precaution to ensure you are made aware your password has been changed in case it was changed without your knowledge or consent.
Image 14: Email Notification of a Changed Password
Recovering Usernames via the Forgot Your Username Link
If a user is part of a school or district which has Password Reset functionality enabled, they may recover their username using the Forgot Your Username? link (Image 15).
Staff members with proper tool rights to the Demographics tab can also look up a user's Campus Portal username on their Demographics record (Census > People > Demographics > Person Identifiers > Portal Username)
Users can request their forgotten username up to five times per day. On the sixth try, the user will be locked out of their account and will need to wait until the next day to try again.
Image 15: Recovering a Forgotten Username
Once the Forgot Your Username? link is selected, enter your Recovery Email address and click the Continue button (Image 16).
The recovery email address is established during the initial setting of preferences as well as managed on the Account Settings tool (for Campus users) or Campus Parent Portal.
Image 16: Entering the Recovery Email Address
Once Continue has been selected, a message will appear, informing you to check your email (Image 17).
Image 17: Notification to Check Recovery Email
You will receive an email informing you of your current Campus username (Image 18).
If you do not receive an email from Campus, try selecting the Try Again button on the Campus login screen (Image 17).
Image 18: Example of a Username Recovery Email
User Incorrectly Attempts to Log Into Campus Multiple Times
Users who incorrectly log into their account multiple times will be required to enter a CAPTCHA each time they attempt to log in. This feature prevents users from being locked out of their account after several failed login attempts and protects accounts from malicious bots and scripts.
The type of captcha displayed is dictated based on the captcha settings established in the Login Security Settings tool.
CAPTCHA functionality enforces case sensitivity for all letters other than C, O, P, S, U, V, W, X and Z.
The audio challenge option for Google reCaptcha does NOT work properly within Microsoft Explorer and Edge web browsers.
Below is an example of each available captcha:
| Campus Captcha | Google reCaptcha |
|---|---|
|
|
Image 19: Entering a CAPTCHA
Enabling Login Alert Notification Emails
In an effort to increase security and Campus account awareness, the Login Security Settings tool allows users to enable login notification and verification code emails to alert users when someone logs into Campus using their account from an unknown device.
For more information about this functionality, please see the following:
The image below (Image 20) is an example of a user setting up their Account Security Email and determining if Campus should remember the device for future logins.
In order for a device to be recognized for future logins, your browser MUST be set to allow cookies.
Having your browser set to automatically delete cookies will cause the device to not be recognized and force you to go through this process each time you log into Campus.
Image 20: Establishing a Trusted Device
Below is an example of an email users will receive if someone logs into their account from an unknown device (Image 21).
Image 21: Login Notification Email
Identifying a Person's Campus Portal Username
You can look up a person's Campus Portal username by going to Census > Person > Demographics > Person Identifiers > Portal Username. This may help when troubleshooting issues such as assisting a person who forgot their username .
Image 22: Identifying a Person's Portal Username
