Sponsored Guests Project

CalNet Sponsored Guests Project

CalNet Sponsored Guests is a new service for campus applications to allow guests to use their personal Google login in lieu of a Calnet ID for authentication.

Note that "berkeley.edu" Google accounts are not accepted: guests without personal Google logins will need to create one to to use the Sponsored Guest services.

Why did we do this?

The legacy guest application was a home grown application that received limited technical support due to dwindling resources. Instead of fixing the outdated application, we found it more feasible to purchase Cirrus Identity, a third-party solution.

What’s new?

Multiple Sponsors for a Guest

The new application allows a guest to be sponsored by multiple employees, and have a single login. In such cases, the guest’s expiration date will be the latest date listed. Applications and sponsors are responsible for appropriately managing access to their guest users.

A Different ID

The legacy guest application created CalNet IDs for guests, similar to the ones we use for the campus community. The new application, instead, allows the guest to login using their Google login and Google authentication. Sponsored Guests will not have a CalNet ID.

Guest Access

Sponsored Guests can access web-based applications that have opted to allow guests, but will not be able to use Active Directory computers and services and cannot update their listing in the campus directory.

CAS Login

New guests login by clicking on the “Sponsored Guest Sign In” link on the CAS page. Sponsored Guests do NOT enter their login and password on the CAS screen directly.

What’s the same?

Many of the functions are similar, even if the look and feel is different.

Sponsors can still:

    • Invite guests

    • Set custom expiration dates

    • Invite guests in bulk via file upload

Guest can still:

    • Accept an invitation

    • Only log into campus applications that explicitly allow guests

Tip: Only employees can sponsor a guest.

What you need to know

Legacy Guest Accounts

Legacy guest account holders will be given the opportunity to convert their account to a CalNet Sponsored Guest account, which will preserve their UID and their existing access. If guests do not respond to the conversion invitation before the deadline, they will need to be sponsored as a new guest and any data linked to their old guest account will no longer be accessible.

Google: The Required Social Login

The Sponsored Guest application is configured to accept only non-UCB Google accounts. Guests without a Gmail account need to create one to use the new guest service.

Legacy Guest Application Abatement

The CalNet team turned off the legacy guest application on May 30, 2019. Applications that allow guests are advised to start using the new guest application as soon as it was available in May 2019.

CAS Service Definition

If your application allows guest access, contact calnet-admin@berkeley.edu to update your CAS service definition to include CalNet Sponsored Guest.

Affiliates vs. Sponsored Guests

People who are temporarily affiliated with the campus are divided into two broad categories:  Affiliates and CalNet Sponsored Guests. Generally, anyone who needs temporary access to restricted campus services OR is paid by the University would require an Affiliate account which may be requested from your department’s HR partner. Anyone collaborating on a project, attending a conference or auditing a class who is not paid by the University is eligible for a CalNet Sponsored Guest account. Go here for more information.

When will this be implemented?

PROJECT MILESTONES

DATE

Set up test environment

March 1, 2019

Create documentation for CalNet website

April 30, 2019

Create internal documentation and resources

April 30, 2019

Begin Pilot

March 15, 2019

CalNet Sponsored Guest application in test and production

May 13, 2019

Test period for app owners that allow guests

May 16 to May 22, 2019

App owners begin using CalNet Sponsored Guest accounts

May 23, 2019

Disallow access to legacy guest application

May 30, 2019

Legacy guests begin conversion to CalNet Sponsored Guest accounts

May 30, 2019

Legacy guest accounts no longer valid

June 28, 2019

 

Have questions? Email calnet-admin@berkeley.edu for assistance.