Identity and Access Management Portal

Identity & Access Management (IAM) Active Directory Services

Overview

The Identity & Access Management (IAM) Portal allows users to manage many aspects of their digital identity. This system can also be leveraged to automatically provision and deprovision users into your respective Active Directory system that may reside within various schools and colleges at UVA. We will help to ensure that all users in your Active Directory environment have the right access to the right systems at the right time!

Benefits

Automated Provisioning and De-provisioning

• By utilizing the logic within our Identity & Access Management system, users can be automatically added and removed based on qualifying roles and attributes. An example of qualifying roles and attributes could be an active staff role within the defined school or college.
• This feature mitigates the need for time-consuming manual updates to your Active Directory environment during on-boarding, status or role changes, and offboarding, while also ensuring compliance with various Human Resources and Information Security policies.

Manage Identity Attributes in One Place

• Users will be able to update their digital identity attributes, such as preferred name, in the Identity & Access Management portal.
• These digital identity attributes will then be written back to your Active Directory.

Password Management

• The UVA password used to access UVA resources will be synchronized to the school’s Active Directory domain, allowing users to use the same password to authenticate across domains, simplifying the user experience.

Account Claim

• All new users follow an account claim process to establish their access. This will allow the user to have near-immediate access to the school or college Active Directory domain without manual intervention.
• The Account Claim process will enable users to claim their computing ID, register for Duo, confirm their preferred name and recovery information, establish security questions, and set a password.

Self-Service

• School IT staff will have the ability to securely view select user profile details through the Identity & Access Management administrative interface to aid in troubleshooting help desk requests related to account management.