UM System Web Application Security

Many of the pages within this system either display sensitive data or allow transactions against the University's administrative data systems. For this reason, you must have an account on our system and provide a username (SSO ID) and password before proceeding.

Unauthorized Access is Strictly Prohibited

Your SSO ID, also known as your NT ID, or Active Directory ID is your user name. If you have an e-mail account at the University, then you have an SSO ID. Your e-mail password is your password here as well.

For example, if your e-mail address is DoeJ@missouri.edu, then you will use DoeJ as your user name. This is true for everyone who has not set up some sort of e-mail alias.

If you have TROUBLE LOGGING IN TO THE PRODUCTION SYSTEM, please see our Frequently Asked Questions before calling your campus HelpDesk or the UM-System HelpDesk.

This site does NOT store or synchronize your e-mail password. Instead we've configured our web server to use the University's Shibboleth authentication system.

Frequently Asked Questions

  1. What is my user name?
  2. What is my password?
  3. How do I logout?
  4. Can I let someone else use my ID/Password?
  5. What if I set up an e-mail alias?
  6. What is the easiest way to figure out my or someone else's SSO_ID?
  7. How does the new Shibboleth authentication Work?
  8. Why did we switch to Shibboleth to authenticate users?
  9. I don't have a University e-mail account, what am I supposed to do?
  10. I typed in my e-mail id and password and it doesn't work. Now what?
  11. I get an error page saying my SSO records don't match my HR records. I've been working here for 10 years, what's going on?
  12. I just started working today/last week. The error page says you don't have my employment records. I am getting paid right?
  13. OK, I've got an e-mail account and I AM in PeopleSoft, but I still can't get in. Now what?
  14. I don't really work for the University but I still need access. What should I do?
  15. I'm still stuck, whom do I call?

    Frequently Asked Questions and Answers

  1. What is my user name?
    For 99% of our users, your user name is the part of your e-mail address before the "@" sign. So, if you are DoeJ@umkc.edu, then your user name is DoeJ. Our user names are NOT case sensitive, so you can type your user name as DoeJ or doej or any combination of upper and lowercase characters. Most people have been using this same user name to login to the MIS Web Applications or University Web Mail for years.


  2. What is my password?
    Your password is the same one you use to access and read your email. Unfortunately, if you don't know what you password is, then neither do we. You'll have to change it. The campus
    HelpDesks can help you change your password, but cannot tell you what it is. We used to be able to lookup PINS, but this new system is more secure and it just can't be done.


  3. How do I logout?
    You MUST CLOSE ALL BROWSER WINDOWS to logout. Most web browser software is written so that data can be shared by different copies of the browser running at the same time. This means if you close one browser window, other windows may still have access to some of the data from the closed window. For this reason the only safe way to logout of the MIS web applications, and many other web based applications, is to completely close all browser windows.


  4. Can I let someone else use my ID/Password?
    NO. It is a violation of University policy to let others use your ID. If other employees in your department need access to the same applications you do, we can set up accounts for them. But letting others use your account, say while you go on vacation, is NOT acceptable.


  5. What if I set up an e-mail alias?
    Some people have created mail aliases for themselves. For example, they may have set up an alias so that other people can mail to Jane@missouri.edu instead of DoeJ@missouri.edu. For those who have done this, your user name is still DoeJ, not simply "Jane".


  6. What is the easiest way to figure out my or someone else's SSO_ID?
    The easiest way is to use the Microsoft Outlook "Address Book". Find the person you are looking for. Double click the entry (or hit the properties button if visible). In the window that opens, look at the "Alias:" field. The value shown there is the person's SSO_ID (with VERY, VERY few exceptions). See the picture below:


  7. How does the new Shibboleth Authentication Work?


  8. Why did we switch to Shibboleth to authenticate users?
    Using Shibboleth gets us closer to a "single sign-on" environment. It is designed to allow you to login with your ID/password on one server, then if a link on a web page directs you to another server, the second server leverages that sign-on. The result is that for many applications you only have to login once, and each web application communicates with the Shibboleth server to figure out who you are. The UM Webapps have used a homemade version of this technology for years, but Shibboleth is more robust and supported by a number of universities and research institutions.


  9. I don't have a University e-mail account, what am I supposed to do?
    We've been talking about e-mail accounts the whole time because most University employees have one, and if they don't, it is easy for them to ask and receive one. But, the fact is that our site uses Active Directory to authenticate users, not really e-mail. The University's Exchange e-mail system uses Active Directory also, so it is simpler to talk about e-mail accounts. Technically, it is possible to access our site by using only an SSO account without an e-mail id, but not having an e-mail address could mean that you will be missing some functionality and will make it very difficult to contact you when we need to.
    In short, we really want you to have a University Exchange e-mail account to use our system. If your organization cannot accommodate this requirement, then there are other alternatives. Contact your campus Information Technology group and tell them what you need to do. They will need to create an SSO account for you and connect it to your HR Records. They should already know what this means and how to go about it. As of this writing, most people in this situation will probably be working at the Hospital or Columbia Regional Hospital. Both of these groups already use Active Directory so you probably already have an ID, but just don't know what it is.
    The most important thing is that your SSO account MUST be set up so that it can synchronize data with the University's PeopleSoft Human Resources system.


  10. I typed in my e-mail id and password and it doesn't work. Now what?
    Obviously, lots of things could be wrong.


  11. I get an error page saying my SSO records don't match my HR records. I've been working here for 10 years, what's going on?
    If you are getting paid, we've got your records. It's just that the SSO/E-mail system can't connect your SSO records to your HR records. Your campus
    HelpDesk should be able to solve the problem using the Active Directory Web Tool. Give them a call.


  12. I just started working today/last week. The error page says you don't have my employment records. I am getting paid right?
    Your supervisor and HR office can settle the "getting paid" part of this question. But, if you are a new employee, it often takes several days or even weeks for your employment paperwork to make its way into our electronic records. We use the PeopleSoft Human Resources data to verify that you are an employee. If you are not in PeopleSoft, we can't let you use our applications. Period.
    Have your supervisor finish your paperwork; our system will be updated 24 to 48 hours later. Hopefully, your e-mail account will synchronize with the HR data and all will be well. (See the next question if all is NOT well).


  13. OK, I've got an e-mail account and I AM in PeopleSoft, but I still can't get in. Now what?
    It is possible to have an e-mail account or SSO ID even if you are NOT in PeopleSoft, and unfortunately this is the number one reason why new employees' accounts don't work even after they ARE in PeopleSoft. You see, if you have an SSO ID or e-mail account, but there isn't enough information to match that account with your HR data, then our automatic update tools will create a second SSO/E-mail account for you. You'll have two accounts, one that you use every day and works great for e-mail, but isn't connected to your Human Resources Data, and one you know nothing about but is. We use the one connected to HR. Your campus
    HelpDesk or e-mail group probably created your original account and they'll have to properly re-connect it to your HR records before you can use the web applications.
    When you contact your campus HelpDesk tell them which account you use every day and have them delete the extra one. They should be able to easily connect your current account to the HR data.


  14. I don't really work for the University but I still need access. What should I do?
    We've thought of that. You'll need what is called a non-compensated employee record so that you have a record in PeopleSoft. We won't pay you, but we'll put a placeholder record in our Human Resources system. Talk to your supervisor or your University contact about setting this up. They'll contact the appropriate Human Resources Office and us. Typical uses of non-comp appointments are for external auditors, consultants, or other outsourced operations that have an approved need to use University administrative applications.


  15. I'm still stuck, whom do I call?
    Each campus is in charge of their own SSO ID's and Passwords. Campus
    HelpDesk numbers are listed below.