IdentiKey & Accounts

Last Updated: 01/10/2018


The information below describes the different account types provided by OIT.

Accounts Based on Affiliation

If you're an HR representative, review the IdentiKey/Person of Interest (POI) FAQ.

Accounts and Authentication Methods

Active Directory (AD) Accounts

What is it:

  • An OIT Active Directory (AD) account's username and password is always the same as your CU Login Name and IdentiKey password. It synchronizes automatically. So if you change your IdentiKey password, your AD password changes as well.
  • OIT Active Directory (AD) accounts are an authentication method used to access various OIT services, like OIT's Exchange service, OIT's file storage service, and Microsoft Windows profiles in OIT managed environments.
  • Often times, AD accounts are placed in AD groups managed by an administrator. Your membership of an AD group can sometimes determine your ability to access a service that uses AD authentication.

Who gets it:

  • Those that are accessing AD authenticated resources like OIT's Exchange service, OIT's file storage service, or work in an OIT managed environment.

When you get it:

  • Your account is ready for you if you ever start using a service like Exchange, file storage, or you're computer is part of an OIT managed environment.

Manage it:

  • AD accounts are automatically synchronized with IdentiKey accounts. The only way to change your AD password is to change your IdentiKey password, using Identity Manager.
  • If you are an in OIT managed environment, you cannot change your AD password via the CTL-ALT-DEL function at the login screen. Al AD, therefore IdentiKey, password changes have to be made in Identity Manager.
  • If you have questions about your AD account or your ability to access particular OIT services that use AD authentication, contact the IT Service Center.
E-mail and Calendar Service

CU Boulder faculty, staff, and students receive a CU Boulder email account, with a email address. Email is an official means of communication at CU Boulder. They also have access to calendar service.

Getting Started Instructions:

Learn more about using all of OIT's email and calendar services.


>>IdentiKey main page.

An IdentiKey consists of a CU login name and an IdentiKey password. IdentiKeys play a large role in computing at CU Boulder. An IdentiKey gives you access to:

  • MyCUInfo, the student and faculty portal
  • My.CU, the employee portal
  • CUConnect, the legacy portal that still contains some tools and features
  • Email services like CU Boulder Gmail and OIT's Microsoft Exchange service.
  • Computers in OIT computing labs.
  • UCB Wireless network.
  • Desire2Learn, learning management system.
  • SkillSoft computer based training.
  • IdentiKey is managed with CU Boulder's Identity Manager.

Learn more about IdentiKey, including when you get it and how to activate it.

PIN Numbers

OIT provisions a PIN (4-digit alphanumeric code) to students that do not provide Social Security Numbers to the university. This PIN is used in conjunction with other personal information to activate IdentiKey accounts in Identity Manager. Students receive their PIN via email from OIT to the email address listed with the Admission’s office. For PIN inquiries, contact the IT Service Center.

Research Computing - One-Time Password Authentication

Learn about the One-Time Password Authenticator used to provide access to the Janus High Performance Computer

Specialty Account Creation (SAC)

What is it:

Specialty Account Creation (SAC) is a web tool that students, faculty, and staff use to create specialty accounts on servers they have been granted access. These servers are not centrally managed by OIT, but by other departments.

Who gets to use the tool:

Only faculty, staff, or students that have been granted access by an administrator. If you are required to use a specialty account for a course or to access a specific resource, you will be instructed to do so. If not, this tool is not for you.

How to create your specialty account:

  • The Specialty Account Creation (SAC) tool is at
  • After selecting the host, you will enter your CU Login Name and IdentiKey password to create your account.
  • Your account's credentials will be the same as your IdentiKey, at the time of creation. If you ever change your IdentiKey password, you need to return to this tool and follow the steps above to synchronize your specialty account with your IdentiKey password., and other OIT Unix based servers

Some CU Boulder faculty, staff, and students utilize other OIT servers such as and for web page hosting. Learn more about web hosting.