Overview
Access Management (AM) Services provide authentication and authorization services for all University-wide digital resources, including web applications, web services, federated provider applications, mobile applications, desktops, IoT devices, and networks, among others.
Offerings
- LDAP Services – An LDAP interface for the following data sources: PennGroups, Penn Directory, PennID translations.
- Network Authentication – Offering for wireless authentication, network electronic authentication, and the Internet of Things (IoT). Kerberos is also available and provides central management, single sign-on, and mutual authentication.
- Public Key Infrastructure (PKI) – Registration authority officers for the University of Pennsylvania for the Internet2 Certificate Authority. We are the final tier for support for the entire University.
- WebLogin – Penn application owners and developers use Penn’s Access Management service to protect their web and mobile applications with PennKey-based single sign-on (SSO), and can also leverage federations with partner organizations for distributed SSO. In the future, this will transition to an offering called Single Sign-On and Federation.
Benefits
- Increases security by centralizing identity infrastructure resources
- Provides a consistent experience when authenticating to web applications and to PennNet
- Recent service updates greatly improves login security, guards against phishing attacks, and is easy to use
Who Can Benefit from This Service
University faculty, staff, students, affiliates, guests, and UPHS