Schoolwires Centricity
Table of Contents Introduction... 1 What Provides... 1 What Does Not Provide... 1 Definitions for... 1 Manage PassKeys in Site Manager... 2 Access... 2 Create PassKeys... 2 Create a PassKey Using Web Form Authentication... 2 Create a PassKey Using Token Authentication... 5 Test a PassKey... 6 Import Users to a PassKey... 7 Approve or Decline Suggested PassKeys... 8 Approve Suggested PassKeys... 8 Decline Suggested PassKeys... 9 Edit and Delete PassKeys... 9 Block a PassKey... 10 Review the PassKey Usage Report... 10 Use PassKeys on the End-user Website... 11 Suggest or Add a PassKey... 11 Use a PassKey... 12 Manage Your PassKeys... 13 CentPKM_051511.docx Page i
Introduction In this guide, we cover the tasks that Site Directors perform while managing PassKeys for the district. In addition, we cover PassKey tasks registered visitors to your website may perform. What Provides Schoolwires is an enterprise single sign-on management solution for K-12 school districts. provides A library of single sign-on PassKeys that provide secure access to web applications through the Centricity platform The tool to create custom single sign-on PassKeys and add to your library The ability to assign access rights from Centricity to web applications based on role A report of how many times each PassKey is used What Does Not Provide provides single sign-on for web applications. However, it does not provide Single sign-on to offline or desktop applications Access to the web applications: users must establish and maintain their own accounts with each application Definitions for PassKey: Provides secure single sign-on access to web applications through the Centricity platform. Individual users are responsible for maintaining their own logins and passwords to the web applications. MyPassKeys: A personal library of single sign-on PassKeys to web applications to which an individual has been granted access. Form Authentication: A one-step process that posts the login form to the web application site. It is essentially the same as users entering their login names and passwords on the login page of the web application. The difference is that the users login names and passwords are on forms that are submitted from Centricity. Token Authentication: A two-step process in which the authentication request posts to the web application site. The web application site returns a web address with a token. Centricity can then navigate to the site and log the user in. CentPKM_051511.docx Page 1
Manage PassKeys in Site Manager As a Site Director, you may create, edit and delete PassKeys. You may also approve or decline suggestions for PassKeys, import users to a PassKey, or block users from suggesting a PassKey. In addition, you have access to the PassKey Usage Report. Access To access 1. Access your Site Workspace. 2. Click the Tools tab or Tools drop-down menu. 3. Select. The PassKeys tab of displays. Create PassKeys You may create some PassKeys that you know are required for the district or you may create them after receiving suggestions from registered users. You can create PassKeys using either web form authentication or token authentication. Create a PassKey Using Web Form Authentication You would generally use web form authentication unless you know that it will not work for a specific web application or unless you know the web application has an API or single sign-on (SSO). Most of the PassKeys you add will probably use web form authentication. To create a PassKey using web form authentication 1. Click New PassKey. The New PassKey wizard begins. 2. Enter the PassKey name. 3. Click the radio button to the left of Web Form Authentication if it s not selected. 4. Enter the entire web address (URL) for the login page on the site for the web application. CentPKM_051511.docx Page 2
5. Click Next. The Parameters window opens. The action fields and parameters are already populated. 6. Map the form requirements to the user name and password fields for the website application. 7. Click Next. The Display window opens. CentPKM_051511.docx Page 3
8. You may enter a description, upload a logo and determine how the application site will display. You may upload JPEG, JPG, GIF, PNG and BMP file types for logos. You may upload files of any size for the logo. However, remember that file size affects load time. 9. Click Next. The Roles window opens. 10. Click the check box or boxes for the roles of the users who will be able to use the PassKey. 11. Click Next. displays. The PassKey you added is active. The specified users can now add the PassKey on the end-user website. CentPKM_051511.docx Page 4
Create a PassKey Using Token Authentication You use token authentication if you know that web form authentication does not or will not work for a specific web application or you know the web application has an API or single sign-on (SSO). To use token authentication, you will need to know and enter the parameters yourself. To create a PassKey using token authentication 1. Access the PassKey tab of. 2. Click New PassKey. The New PassKey wizard begins. 3. Click the radio button to the left of Token Authentication. 4. Click Next. The Parameters window opens. 5. Enter the information required to obtain a token from the web application. Gaggle is a web application that uses token authentication. Here we ve entered sample parameters. 6. Click Next. The Display window opens. 7. Click Next. The Roles window opens. 8. Click the check box or boxes for the roles of the users who will be able to use the PassKey. CentPKM_051511.docx Page 5
9. Click Next. displays. The PassKey you added is active. The specified users can now add the PassKey on the end-user website. Test a PassKey You may test a PassKey once you have mapped the parameters or after you have created the PassKey. Before you test a PassKey, however, we recommend that you sign out in order to clear cookies. To test a PassKey 1. Click Test. The PassKey Login screen opens. 2. Enter your Login ID and Password. 3. Click Log In. The web application displays if you have created the PassKey correctly and entered the correct Login ID and Password. CentPKM_051511.docx Page 6
Import Users to a PassKey You may wish to import users for a PassKey. This allows them to use the PassKey, provided they have one of the roles assigned to that PassKey. The first step is to create a comma separated file (CSV) that contains the following fields. These fields must be in this order within the CSV file. Centricity user name PassKey user name PassKey password In completing this import, remember that you are not importing the users into Centricity or assigning them the required roles. You are simply allowing them to use the PassKey, provided they have one of the required roles. If they do, the PassKey will be available for them in the PassKey window on the enduser website. To import users 1. Access the Workspace. 2. Click Import PassKey Users. The PassKey User Import wizard begins. 3. Browse your computer for your import file. 4. Click Next. The Process the File window of the wizard opens. CentPKM_051511.docx Page 7
5. Choose the PassKey from the drop-down list. 6. Click Next. A Successful Import window opens. 7. Click Finish. The Workspace displays. The users you imported to the PassKey will see that PassKey in the PassKey window on the end-user website provided they have one of the roles you specified for that PassKey. Approve or Decline Suggested PassKeys When registered users to your website suggest PassKeys, you will see the suggested PassKeys on the Suggestions tab in PassKey Manger. Notice that you can filter the PassKeys to see only open PassKey suggestions, approved PassKey suggestions, or declined PassKey suggestions. The open PassKeys suggestions display by default. Approve Suggested PassKeys To approve a suggested PassKey 1. Click Approve to the right of the suggested PassKey. An email window opens. 2. Edit the email as desired. 3. Click Send. The email goes to the registered user who suggested the PassKey. 4. Create the PassKey. See Create a PassKey earlier in this guide. CentPKM_051511.docx Page 8
Decline Suggested PassKeys To decline a suggested PassKey 1. Click Decline to right of the suggested PassKey. An email window opens. Notice that the option to move that PassKey to the blocked list is selected. If you move a suggested PassKey to the blocked list, you will not receive any further suggestions for that PassKey. Registered users suggesting it receive a message informing them it is blocked. 2. Deselect Move suggestion to the blocked list if desired. 3. Edit the email as required. We recommend you provide registered users with the reason for declining or declining and blocking a suggested PassKey. 4. Click Send. The email goes to the registered user who suggested the PassKey. If you wanted the PassKey to be blocked, it displays on the Blocked List tab. Edit and Delete PassKeys You can edit PassKeys on the PassKeys tab. You can delete PassKeys on the PassKeys tab or on the Blocked List tab. If you delete a PassKey, no one can add that PassKey on the end-user website, but registered users may suggest it from the end-user website. CentPKM_051511.docx Page 9
Block a PassKey You may add a PassKey to the blocked list without a user suggesting it. To block a PassKey to a site 1. Click the Blocked List tab. 2. Click New Blocked Site. The New Blocked Site window displays. 3. Enter the name of the web application s site. 4. Enter the web address (URL) for the site. 5. Click Save. The site you blocked displays on the Blocked List tab. Registered users suggesting it receive a message that it is a blocked site. Review the PassKey Usage Report To review the PassKey Usage Report 1. Access your Site Workspace. 2. Click the Tools tab or Tools drop-down menu. 3. Click Site Reports. Site Reports display. 4. Click PassKey Usage Report. The PassKey Usage Report displays. 5. Choose the dates for the report from the drop-down lists. 6. Click Run Report. The report displays. PassKey usage increments by one each time a PassKey is used. CentPKM_051511.docx Page 10
Use PassKeys on the End-user Website Registered users of the website can suggest PassKeys, add approved PassKeys to their accounts and manage their PassKeys. To access the PassKey window on the end-user website, click PassKey on the MyStart Bar. If you do not see PassKey on the MyStart Bar, a Site Director may need to add the HTML code required for this link to your template. Suggest or Add a PassKey To suggest or add a PassKey 1. Access the PassKey window. Web applications to which you already have PassKeys display in this window. You can add or suggest other PassKeys. As you can see here, this user has a PassKey for MyGradeBook. 2. Click Add New PassKey. The Available PassKeys window opens. PassKeys that you can add to your account display in the window. 3. To suggest a PassKey a. Click Suggest a PassKey. The Suggestion window opens. CentPKM_051511.docx Page 11
b. Enter a name for the passkey. c. Enter the web address (URL) that users will need to log in to that application. d. Click Save. The homepage of your school or district website displays. You will receive an email letting you know if the Site Director approved or declined your PassKey. If approved, the Site Director will have to create the PassKey, which may not occur right away. 4. To add a PassKey a. Click the check box to the left of each of the PassKeys you d like to add. b. Click Add PassKeys. The homepage of your school or district website displays. The PassKey will display in the PassKey window the next time you click on PassKey on the end-user website. Use a PassKey To use a PassKey 1. Sign in to your school or district website. 2. Click. The PassKey window opens. 3. Click the PassKey you want to use. a. The first time you click on a PassKey in the PassKey window on the end-user website, you will sign in using your credentials. b. Subsequently, when you click on the PassKey, your application opens. CentPKM_051511.docx Page 12
Manage Your PassKeys You manage your accounts on the end-user website. 1. Sign into your school or district website. 2. Click Access My Info. Your profile displays. 3. Click on the Edit My PassKey Accounts tab. Your PassKeys display. 4. You can add a PassKey that a Site Director has created or remove one from your PassKeys list. In addition, you can edit or delete your sign-in information. Your current password to that application will never display here. Remember, before you change your password here, you should change it in the web application. You cannot suggest a PassKey here. You do that in the PassKey window on the end-user website. CentPKM_051511.docx Page 13