Deputy Program Updates

Update February 1, 2017

Effective Wednesday, February 1, 2017, the legacy CalNet Deputy tool to Issue Token to Reset CalNet Passphrase will be retired.

As a CalNet Deputy, you will no longer be able to issue tokens for passphrase resets. Given the new self-service tools at mycalnet.berkeley.edu, the token system is no longer necessary.

Please review section IV. Using CalNet Account Manager for tips on how you can help users in your unit.

If you have not already done so, you may request access to the CalNet Admin Tool (CAT), which allows you to see if a user has been locked or has a recovery email address (which is required to use mycalnet.berkeley.edu). See https://docs.google.com/document/d/1xF6ZMyTIElMBIksebQJwzGZtLrd6uzcV0WvRUf9l8ao/edit for instructions on requesting access to CAT.

Update October 7, 2016

We’ve had several questions about changes to deputy tools after the Sync Code was retired on October 4, so wanted to make sure that all deputies understand the new tools and processes. Please note: the Sync-to-AD tool is still working and was not retired with the Sync Code.

What is mycalnet.berkeley.edu?

mycalnet.berkeley.edu is a new suite of self-service tools that enable users to manage their own accounts, as long as they have a non-berkeley.edu recovery email address in their account. Deputies should encourage their colleagues to update their recovery email address at mycalnet.berkeley.edu in order to use the self-service tools.

Can I still reset passphrases?

Yes. Deputies can still issue tokens to reset passphrases for the units outlined on their deputy application. As always, you must verify ID before issuing a token or performing any deputy action. Users who have a recovery email addresses listed in CAT can reset their passphrase themself using mycalnet.berkeley.edu.

Why can’t I access the tool to issue a reset token?

The link you are using may be outdated. Be sure to use https://net-auth-p2.calnet.berkeley.edu/cgi-bin/krbtoken?reset=1  Please take a moment to update your bookmark, now.

You can always find the most current links to deputy tools in the Deputy Toolbox.

Can I issue tokens for new users to claim accounts?

No. The ability for deputies to issue a token for a new user to claim a CalNet ID was retired when the Sync Code was retired on October 4, 2016.

How does a new user claim a CalNet account?

To start the process to claim an account, a new user enters their employee or affiliate ID at: https://bpr.calnet.berkeley.edu/account-manager/claimAccount/start?identifierType=hrmsEmployee

For additional information, see: https://calnetweb.berkeley.edu/calnet-people/info-new-users/when-do-people-get-calnet-accounts

Note: If a new user’s non-berkeley.edu email address is missing or incorrect in HCM, they will not be able to claim an account. See below to find out how to request that a recovery email address be updated or changed.

How do I request a recovery email address be updated or changed?

If your user does not have a CalNet account or cannot log in to mycalnet.berkeley.edu, please verify identity and send an email to calnet@berkeley.edu with the user’s full name, employee or affiliate ID number, and month and day of birth along with their non-berkeley.edu email address and a request that we update it.

You can also request that your department’s HR staff correct the email address in HCM, but changes made in HCM do not appear in CalNet until after noon the next day.

What do I do with CAT?

CAT allows you to see if a user has a recovery email address and their active affiliations. See the CAT instructions to find out how to be granted access to CAT.

If a user does not have a recovery email address listed in CAT, they will not be able to claim an account or use the self-service tools at mycalnet.berkeley.edu.

Where do I go for help?

All of the tools you need are in the Deputy Toolbox: https://calnetweb.berkeley.edu/calnet-deputies/deputy-toolbox

If you have a new user who cannot claim an account or use mycalnet.berkeley.edu, send an email to calnet@berkeley.edu with the user’s full name, employee or affiliate ID number, and month and day of birth along with their non-berkeley.edu email address

If you have any additional questions, feel free to email calnet@berkeley.edu.