Overview
Access Management (AM) Services provides authentication and authorization services for all University-wide digital resources, including web applications, web services, federated provider applications, mobile applications, desktops, IOT devices, and networks, among others.
Offerings
- LDAP Services – An LDAP interface for the following data sources: PennGroups, Penn Directory, PennID translations.
- Network Authentication – Offering for wireless authentication, network electronic authentication, and the Internet of Things (IoT). Kerberos is also available and provides central management, single sign-on, and mutual authentication.
- Public Key Infrastructure (PKI) – Registration authority officers for the University of Pennsylvania for the Internet2 Certificate Authority. We are the final tier for support for the entire University.
- Weblogin – Penn application owners and developers use Penn’s Access Management service to protect their web- and mobile- applications with PennKey-based Single Sign On and can also leverage federations with partner organizations for distributed SSO. In the future, this will transition to an offering called Single-Sign-On and Federation.
Benefits
- Increases security by centralizing identity infrastructure resources
- Provides a consistent experience when authenticating to web applications and to PennNet
- Recent service updates greatly improves login security, guards against phishing attacks, and is easy-to-use
Who Can Benefit from This Service
Any PennKey user
Additional Information and Resources
- Penn's Identity & Access Management Program
- PennKey Details
- Shibboleth Attributes at Penn
- Weblogin Documentation, Best Practices, and Troubleshooting
- WebLogin Two-step Details
- Two-Step Verification: getting started
- Two-Step Verification: detailed instructions
- Two-Step Overview and FAQ
- Two-Step Verification: enrollment and manage settings
- Trouble logging in
- Two-Step information for IT support staff
-
If you experience any problems with Two-Step, your IT support staff of your School/Center can help you. Your IT support provider can assist you with the Two-Step enrollment process, usage, or any technical issues that occur. If you are unsure who your IT support provider is, consult this guide.
If you do not have access to your phone or fob, you have three alternative methods to obtain a verification code:
- Use a code from your list of pre-printed single-use verification codes
- Send a single-use verification code to your backup phone by text and/or voice
- Authorize a previously identified friend to retrieve a single-use verification code
-
If you are unable to obtain a verification code using one of the above options:
- The IT organization of your school or center may have a Two-Step Administrator who may be able to assist you.
- The Two-Step Verification Code Hotline may be able to assist. The hotline can be contacted at (215) 746-2222 during business hours (Monday – Friday, 8:00am – 6:00pm Eastern time)