Identity Management

New Term for POIs: Harvard Sponsored Role – Please Update Systems & Documentation

September 8, 2022

Effective September 22, 2022, Harvard will replace the term “Person of Interest” (POI)—used to describe roles that grant individuals temporary access to the University’s digital and physical resources for administrative or scholarly purposes—with a new term, “Harvard Sponsored Role”.... Read more about New Term for POIs: Harvard Sponsored Role – Please Update Systems & Documentation

New Process to End Date POI Roles with Ineligible Sponsors

January 13, 2022

To limit the tenure of POI roles with ineligible sponsors, IAM will be implementing a new process beginning January 15, 2022 that will update the role end date of any POI role with an ineligible sponsor if sponsorship is not transferred within 10 days of the current sponsor becoming ineligible.... Read more about New Process to End Date POI Roles with Ineligible Sponsors

POI Policy & Portal Updates

August 12, 2021

POI Policy Updates

Following the rollout of the POI (Person of Interest) Policy and Portal last month the IAM (Identity and Access Management) team received a number of policy questions and requests for exceptions.... Read more about POI Policy & Portal Updates

The Identity & Access Management team will have several major releases this summer.

June 10, 2021

HarvardKey:

On June 24th, HarvardKey will get a new, streamlined sign in screen, along with updates to the Duo two-step authentication interface. This release also retires the eXtended ID (XID) service. Legacy XIDs will be migrated into the new HarvardKey Light service. To learn more, visit the Identity & Access Management website.... Read more about The Identity & Access Management team will have several major releases this summer.

Fraud Alert Reporting

May 14, 2020

Please be sensitive of attempted Business Email Compromise/Email Account Compromise (BEC/EAC) scams.

Common BEC/EAC Characteristics:

Targeting businesses and individuals who perform legitimate transfer of funds requests
An urgent need or attempt to conduct unauthorized transfer of funds or sensitive data, e.g., requesting a change in wire transfer details
An unexpected inquiry from a vendor looking for confirmation of orders for physical and/or branded goods, e.g., procurement fraud
Often sent from accounts appearing to be valid (e.g., John_Harvard.harvard.edu@outlook.com) or compromised Harvard emails

Two Step Verification for Office 365

May 16, 2019

We are pleased to announce that two-step verification for Office365 will soon be available to protect your email, OneDrive and other Office365 resources. This is the same security that currently protects your direct deposits and benefits through HarvardKey.

Why the change?

In the past six months, over 230 email accounts were compromised by cyber criminals, who initiated various fraudulent actions. In most cases, the email account’s owner experienced substantial downtime.

Implementing two step verification will protect all of your Office365 data, including your email and files.

What do I need to do?

Your local IT Support organization will be reaching out to you soon; be sure to follow their instructions. In the meantime, you can find out more information here.

Updates for the Managing Identity & Affiliation Securely (MIDAS) Application

October 13, 2016

We are excited to let you know that the MIDAS Access Request Form has been added to the online ServiceNow Self-Service Portal at https://harvard.service-now.com/selfservice/catalog_home.do It is located within the Identity & Access Management area.

This change means no more PDF form! Instead, a simple online form, with just a few fields to fill in, will enable people to request access to MIDAS. We ask that you share this news (and the link) with anyone who might need to request...

Two-step Verification Required for VPN and HarvardKey

September 15, 2016

Harvard will soon require the use of two-step verification to access many University resources and applications, including VPN. Don't wait until the deadline, activate two-step verification now: huit.harvard.edu/twostep.

If you use HUIT VPN services, please take the following actions before September 28:

Claim your HarvardKey if you haven’t already done so. https://key.harvard.edu
...

Two-step verification will soon be required for HarvardKey

August 18, 2016

Two-step verification will become required for everyone using HarvardKey this fall. Harvard accounts are actively stolen for fraud and intelligence gathering daily. Two-step verification uses a pre-registered device in your possession, such as your smartphone, to confirm your identity when you log in with HarvardKey. That way, even if your password is stolen, cybercriminals can't get into your account without having that device as well. Two-step verification takes just a few minutes to set up, is easy to use, and in most cases requires your second step just monthly. Activate two-step...

HarvardKey Update

June 16, 2016

On June 1^st we completed the 100% Plan so that everyone in these locations has been migrated to the HarvardKey: FAS, GSAS, GSD, GSE, HDS, HSPH, RAD and SEAS. The other schools (HBS, HKS, HLS, HMS and HSDM) are working towards moving everyone over by this summer. Soon, the last outstanding population (Library Special Borrowers) will also be able to claim their HarvardKey.

A power tip for those who have moved over: on the HarvardKey login screen you can still enter your HUID in the Login Name field (just like you did for the old PIN page)....