PESC Business, Standards & Technology in Authentication Philip Patton University Registrar University of Northern Iowa

University of Northern Iowa Background  Founded 1876  Fall 2003 enrollment of 13,441  Comprehensive university offering degrees through Doctorate in Education  One of three public universities in Iowa

Systems and Applications  Legacy SIS systems  Oracle Financial systems  On line systems brought up 1981  Degree audit 1985  Student self registration started 1995  EDI live in 1995

Web applications  Comprehensive Student Portal  Student initial registration  Drop/add transactions  Degree audits  Plan of Study  Address changes  Accept financial aid award

Web applications, continued  Parking Permits  Athletic/Arts ticket purchasing  Class lists for faculty  Web CT  Application for admission  E-commerce  Housing contracting

And more  Job interview reservations  Surveys  Applications to graduate  And more in development

What is Authentication  Having an undisputed origin  Conforming to fact and therefore worthy of trust, reliance or belief.

Authentication - Past  Student number is a 6 digit assigned number  Social Security number can be substituted and all applications accepted either.  Four digit PIN used with an original default of birth month and day.

Authentication - Present  ID is either: -- Student number -- Social Security number -- Oracle employee number

Authentication - continued  Password: -- self selected -- minimum length is 8 characters and maximum is 64 characters -- must contain at least one alpha, one numeric and one special character --expires after 90 days

Issue or considerations  Vendors, vendors, vendors, vendors………..  Are we requiring a password change too often for students?  How do you keep it secret when you use one constant id?