Implementation of UCTrust at UCOP will enable the use of single sign-on technology for user access to various applications. UCTrust requires verification of an individual’s identity. Currently, the UCOP Payroll Preparers are responsible for verifying an employee’s identification as part of the employment process. Now, as part of UCTrust implementation, they also will certify that they observed the employee log into his/her Outlook/AD account. This process will provide certification that the individual is who he/she purports to be and is the owner of that particular AD account. Because the AD credentials (user name login and password) are now used for UCTrust certification, it is necessary to strengthen the UCOP process for resetting passwords.
The password reset procedure is as follows:
- For employees:
- Individuals may request a password reset for themselves by e-mail or phone:
- They must provide their employee ID number.
- The UCOP TechDesk will verify the employee ID number before processing the reset, and record it in the HEAT system which will provide an audit trail for all password resets.
- Managers, supervisors, or other trusted employees may request a password reset for another individual:
- They must provide both the employee ID number of the individual needing the password reset and their own employee ID number.
- The UCOP TechDesk will verify both employee ID numbers before processing the reset, and record them in the HEAT system which will provide an audit trail for all password resets.
- For contractors:
- Managers or other “trusted individuals/employees” (e.g., executive secretary or assistant) may request a password reset on behalf of a contractor:
- They must provide their own employee ID number.
- The UCOP TechDesk will verify the trusted individual’s employee ID number before processing the reset, and record it in the HEAT system which will provide an audit trail for all password resets.
