Enterprise Information Technology Services Press Release
The University of Georgia
Athens, Georgia

OCIO > EITS > Press Releases

Thursday, August 20, 2009

Identity Management System update: New tools for CAN, SSN, and MYID translation and access to phone-assisted verification

ATHENS, Ga.— Effective August 3, 2009, the UGA Middleware Team deployed Phase I of the UGA Identity Management System (IdM System).

Over the past months, the University of Georgia has focused attention on the development and deployment of a multi-phased Identity Management System (IdM System) designed to provide an enterprise approach to the management of the multiple identities used within the university community. The two principal goals of this initiative are: 1) to create and sustain a managed and coordinated identity management foundation; and 2) eliminate reliance on the SSN as an identifier. As you may be aware, the IdM System receives data feeds from three primary authoritative sources: Human Resources, Student System, and the UGACard system. The primary focus for Phase 1 was the construction and deployment of the technical architecture for the IdM System, and the development of initial functionality to meet requirements identified by UGA core administrative business units.

The following information is provided recognizing the importance of communicating continued progress to campus constituent groups based on established timelines and identified deliverables. At this point-in-time, Phase I of the multi-phased system, and the associated tools, are in place and will enable both the ability to translate SSN to CAN, and the authentication mechanism for phone verifications for authorized UGA personnel. In concert with the Phase 1 deliverables, and supporting this functionality, are the following tools which will be made available for use by 'authorized UGA personnel':

1. Translation screen providing translation capability for CAN, SSN, and the MyID;
2. Phone-assisted verification screen that allows UGA functional units to verify the authenticity of persons over the phone;
3. Relational database providing capability to translate large sets of SSN and MyID data to the CAN; and
4. Request Screen for roles such as "self," "others," and "approvers."

As noted, 'authorized UGA personnel' is a critical component in the management of the identities currently in use by UGA, particularly the SSN. The UGA Middleware Team, in collaboration with the IdM Functional Committee, is in the initial stages of granting access rights to screens within the Identity Management System to selected UGA core business units. It is important to remember that access to the IdM tools, and the associated database, will be limited to only those units that absolutely require specific data for compliance with federal and state reporting requirements and/or for conducting UGA business. Examples include federal and state tax reporting, transcripts, financial aid, test scores, Board of Regents reporting, and other regulatory compliance requirements.

Recognizing the future institutional need to grant wider access to the IdM system, tools, and database resources referenced above, policy, procedures, and access roles/rights are currently in development by the Middleware Team and the IdM Functional Committee in concert with the UGA Office of Information Security for granting access to the data housed within the IdM System. The decision regarding those units conducting University business, and requesting access to the system and the associated database over-and-above those core administrative business units previously identified, will require Senior Vice President-level approval.

Information and requests regarding access to the tools and database can be secured by sending an e-mail to idm@uga.edu. In addition, the Middleware Team is offering training on the use of the IdM System and will continue to provide user training during the month of August. Additional information regarding the Identity Management Initiative and SSN mitigation Program can be found at idmanage.uga.edu. Questions and requests for infomration on the overall program/project can be directed to Rehan Khan, Associate CIO for EITS Application Development and Data Management, mrkhan@uga.edu, or Shawn Ellis, Director of EITS Client Services, spellis@uga.edu.

Please remember that the Identity Management System, and the tools described above, are part of the overarching Identity Management Initiative at UGA. The Identity Management Initiative focuses on a systematic, multi-phased approach targeting an enterprise solution for managing, mitigating, and consolidating the UGA faculty, staff, and student identities, including a) SSN; b) UGA MyID, which is used to access email, online learning, and other electronic services; and c) UGACard Access Number known as the CAN which also serves as the UGA ID number.

About the Office of the CIO and EITS
The Office of the Chief Information Officer and Enterprise Information Technology Services (EITS) are committed to the mission of UGA as a land-and-sea-grant institution where academics come first and the research extensive university community encourages research efforts at the undergraduate and graduate levels. To that end, under the direction of the University´s Chief Information Officer, EITS endeavors to provide a robust, reliable, and secure information technology infrastructure, maintain essential production services, and offer world-class support.