PSU Administrators
This page has information specifically for users with the NCEdCloud PSU Administrator Role.
Escalating Support (PSU Administrators)
Before logging a ticket with the Identity Automation Support Center, please check the NCEdCloud IAM Service status page at https://status.ncedcloud.org. Also, check to see if the NCEdCloud Documentation site has an answer at https://docs.ncedcloud.org. For NCEdCloud IAM Service issues that cannot be handled within the PSU, tickets should be opened with Identity Automation Support.
Note: Only NCEdCloud users with the PSU Administrator role can open a ticket with Identity Automation.
Email: support@identityautomation.com
Phone: (+1) 919-747-4923
Account Claiming
- Students
- For information on the claiming process for students, please refer to the NCEdCloud IAM documentation for Claiming Student Accounts.
- Note: Older students (6th – 12th grade) must still answer security challenge questions the first time they log in so they can reset their passwords.
- Teachers and Staff
- For information on the claiming process for teachers/staff, please refer to the NCEdCloud IAM documentation for Claiming Staff Accounts.
Key Features
Target Applications
Within the NCEdCloud RapidIdentity portal, PSU Administrations can find various workflow request options related to target applications. For more information on what these options are, please vist the NCEdCloud documentation page on Target Application Requests.
Privileged Roles
A number of privileged roles exist in NCEdCloud that grant additional access to manage users and/or the IAM Service for each PSU. Employees requiring additional access should submit a request for the role(s) they require. The PSU Administrator(s) will be notified to approve or deny the request. If a PSU has not yet identified a PSU Administrator, the request is routed to the Identity Automation Support Center for approval by NCDPI. Note that roles are only revoked if the user is disabled with the PSU, if the user self-revokes, or if a PSU Administrator contacts support to request the revocation.
Roles available in NCEdCloud:
- PSU Administrator (also displayed as “LEA Administrator”): highest available; manage all users, submit opt-in requests, open support tickets.
- PSU Data Auditor (“LEA Data Auditor”): view only access to all data.
- PSU Help Desk (“LEA Help Desk”): ability to reset passwords, security questions, and TOTP codes for all employees and students. Cannot view or manage PSU Administrator accounts.
- PSU Student Help Desk (“LEA Student Help Desk”): ability to reset passwords and security questions for all students.
- School Help Desk: ability to reset passwords, security questions, and TOTP codes for all employees and students in a given school code. May be stacked to provide multiple schools.
- School Student Help Desk: ability to reset passwords and security questions for all students in a given school code. May be stacked to provide multiple schools.
See the Privileged Roles Documentation for more detailed information.
Alias ID
By default, NCEdCloud allows users to log in using either their UID or email address. To disable email, please submit an opt-out request.
Classlink Seamless Login
A new feature called Seamless Login is now available for PSUs utilizing Classlink as their local portal/identity provider with students. This feature is not compatible with staff accounts.
With Seamless Login, PSUs can publish selected NCEdCloud integrated applications such as NCSIS, Schoolnet, Canvas, and Amplify in their local Classlink portals. Behind the scenes, Classlink will communicate with NCEdCloud to authenticate students and pass them to the requested application. This allows end-users to essentially skip NCEdCloud completely for a “seamless login” to NCED Connect (formerly Home Base) applications from Classlink.
PSUs may alternatively choose to simply place an NCEdCloud icon in their local Classlink portal to ensure students can always access all available applications in the NCEdCloud IAM Service for their PSU.
To request configuration of Seamless Login for your PSU, an NCEdCloud LEA Administrator should fill out and submit the Request workflow in NCEdCloud.
Disabling Users
PSU Administrators may disable a user account under the People view, so the user cannot log into the NCEdCloud. This function should only be used only for “emergency” disables related to terminations or a security compromise. It’s important to understand that all accounts are ultimately controlled (enabled and disabled) by the source data systems that “feed” the NCEdCloud IAM Service nightly. Rarely, you might need to override the nightly source data system updates. The document linked below explains all of this and more.
“Ask the Experts” Webinars
Identity Automation and NCDPI have begun hosting quarterly “Ask the Experts” webinars for PSU Administrators. These forums will primarily:
- Review current and new Workflows available for PSU Administrators to automate common tasks and improve your efficiency
- Discuss common issues and solutions
- Respond to your questions (these can be submitted during the webinar Registration process, or entered below)
Have Questions? Fill out the “Ask the Experts Questions” Google form to have your questions & concerns addressed during the next webinar.
To register for the next webinar or access the recordings and slides of past webinars, please see the schedule below.
Data Security Info
As PSU Administrators, you have access to employee and student data that may be protected by a number of Federal and State Regulations, Privacy Laws, and Guidelines. Make sure you understand your responsibilities for protecting and securing your PSU data before downloading any files to your devices. The NCDPI Data Management Resources page is not exhaustive, but it provides some additional resources.
Documents
Technical and Informational Resources for the NCEdCloud IAM Service:
White Papers and Diagrams
- Integration Methodologies for NCEdCloud (99K pdf) – Updated November 2024. Describes supported and preferred integration methods for vendors integrating applications with the NCEdCloud IAM Service.
- Updated Staff Email Provisioning Diagram (236K pdf) – January 2024. Updated email flow indicating preferred Source System (SIS) for staff email addresses in the NCEdCloud IAM Service.
- User Account Disables, Disabling Accounts From Source Updates, and the “Override” Views In the People View (460K pdf) – Updated July 21, 2022. Describes the differences and relationships between to titled functions used in the Profiles tab.
- Source Data Schemas and Mappings, (122K pdf) – May 1, 2014, Updated Feb 11, 2020 Lists the schemas for employee and student data as well as mapping attributes to the source systems
- NCEdCloud Staff Email Provisioning (86K pdf) – Updated September 2017. Flow diagram and explanation of requirements for staff email to be populated in the NCEdCloud IAM Service