One Login, Many Services.
Welcome to your unified login experience. We've replaced multiple passwords with a single, secure "Digital Passport" to give you seamless and safe access to all our services. This guide explains how it works and how it protects you.
The Seamless Journey
Our system uses Single Sign-On (SSO) to log you in everywhere after just one authentication, and Single Log-Out (SLO) to securely end your session everywhere with one click. Explore the interactive diagrams below to see how these processes work behind the scenes to provide both convenience and security.
Interactive Flow: Single Sign-On (SSO)
Your Connected Services
Your single login gives you access to the entire network of services, including:
Fortifying Your Digital Identity
This system isn't just about convenience; it's a major security upgrade. By centralizing authentication, we can enforce the highest security standards across all services, protecting your account with multiple layers of defense.
One Strong Password
Create one high-quality password instead of juggling many weak ones. This system enforces strong password policies everywhere.
Multi-Factor Authentication
Add a powerful layer of security. Activating MFA on your central account protects you across all connected applications.
Reduced Attack Surface
Individual applications never see or store your password. They only receive a secure token, protecting your master credential.
Global Security Standards
Our system is built on open, globally recognized protocols like OpenID Connect, ensuring vetted, best-practice security.
Centralized Monitoring
All login activity is monitored in one place, allowing our security teams to detect and respond to threats more effectively.
Secure Single Log-Out
Log out once to securely terminate your session on all applications, preventing unauthorized access on shared computers.
Your Data, Your Control
We believe in transparency and user control. Our system operates on the principle of "least privilege," meaning applications only receive the minimum information necessary. You are always in control of any additional data sharing.
Understanding Shared Information
When you log in, the "Passport Office" gives the application a secure token (like a temporary ID badge) containing information called "claims." The table below details what's shared. Click a row for more info.
| Information (Claim) | Consent Required? |
|---|---|
| Unique User ID | No (Essential) |
| Username / Email | No (Essential) |
| Assigned Roles/Groups | No (Essential) |
| Full Name | Yes |
| Profile Picture | Yes |
Click on a row in the table to learn more about the data shared.
Frequently Asked Questions
While our goal is a seamless experience, there are times you might be asked to log in again. These are typically intentional security measures. Here are answers to common questions.
For your security, sessions automatically expire after a set period of inactivity. This is a standard security measure to prevent unauthorized access if you leave your device unattended. You simply need to log in again to start a new, secure session.
This is called "step-up authentication." For high-risk actions like changing your profile details or accessing admin settings, we require you to re-verify your identity. It's an extra layer of security to ensure it's really you performing a critical task.
We are working to integrate all services, but some legacy applications may not yet support modern authentication standards. These will continue to require a separate login until they are updated and integrated into the SSO system.
The SSO session relies on a secure cookie stored in your browser for the central login domain. If you clear your cookies, use a private/incognito window, or switch browsers, the system can no longer recognize your session, and you will need to authenticate again.