Skip to main content

Scheduled Service Change: Shibboleth IDP update

Event:
2025-10-12 07:30:00
Expected Duration:
2025-10-12 07:45:00
Status:
Closed
Brief Description:
On Sunday, October 12 at 8am, two updates will be implemented in the Shibboleth Identity Provider: 1. Split Username and Password Entry into separate screens 2. Secure Connect passkey enrollment reminder
User Impact:
User who do not have NETID cookie in the browser, will first enter their NetID, then be prompted to enter their password on a second screen. After login, users who are eligible for Secure Connect but haven’t enrolled will be shown a reminder page prompting them to enroll.
Services Affected:
Authentication and Authorization
Subsites Affected:
CUWebLogin
Identity Management
Full Description:
The following updates will be implemented in the Shibboleth Identity Provider (IdP) system to enhance the login experience: 

  1. Split Username and Password Entry into Separate Screens
    1. Users will now enter their NetID on the first screen and, after clicking "Next," will be prompted to enter their password on a second screen. (See examples on this IT News article.)
    2. This change aligns with industry best practices and improves compatibility with future features. 
    3. Individuals who already have an active NetID browser cookie may not see the updated login flow.
  2. Secure Connect Passkey Enrollment Reminder 
    1. After a successful login, individuals eligible for a Secure Connect passkey, but who have not yet enrolled, will see a reminder page encouraging them to complete enrollment. 
    2. This reminder will appear only for eligible individuals who haven’t enrolled.
CIT TDX ID:
1963311


Timeline of Changes

Description Current Status Date Time
The following updates will be implemented in the Shibboleth Identity Provider (IdP) system to enhance the login experience: 

  1. Split Username and Password Entry into Separate Screens
    1. Users will now enter their NetID on the first screen and, after clicking "Next," will be prompted to enter their password on a second screen. (See examples on this IT News article.)
    2. This change aligns with industry best practices and improves compatibility with future features. 
    3. Individuals who already have an active NetID browser cookie may not see the updated login flow.
  2. Secure Connect Passkey Enrollment Reminder 
    1. After a successful login, individuals eligible for a Secure Connect passkey, but who have not yet enrolled, will see a reminder page encouraging them to complete enrollment. 
    2. This reminder will appear only for eligible individuals who haven’t enrolled.
 2025-10-09 10:35:32