KIT - SCC - Services - Working environment

User account (password)

	Activation of employee, guest and partner accounts The SCC offers you to activate your KIT account in a secure way in order to be able to use various services such as e-mail with this account.
	Atlassian-Accounts SCC provides account management for using Atlassian software services, such as Jira, Confluence, and Trello. This allows linking KIT accounts or kit.edu email addresses to accounts in the Atlassian cloud so that the KIT user account (username and password) can be used to access Atlassian cloud services (single sign-on).
	Federated Login Services (FeLS) The Federated Login Services, FeLS for short, provide a secure, central access point (single sign-on) for services that are also used by members of other research institutions. Using the federated open-source identity management system RegApp, registered users from the different institutions are enabled to securely log on to various services. The persons can use the account provided by their home institution.
	Group management for ITB Allows ITBs to manage the groups of their OU.
	Guest and Partner Management (GuP) With the Guest and Partner Management (GuP), KIT organizational units can provide their partners with the accounts and services necessary for collaboration. The GuP is an application in the SAP web portal.
	KIT Active Directory The SCC provides the KIT organizational units with a Microsoft Active Directory based on Windows Server 2016. The organizational units (KIT-OEs) receive access to an OU provided for them in the KIT-AD, in which they can manage their AD objects independently.
	KIT Admin Account A KIT Admin account is used for unique identification of a neutral administration account in the IT environment of an organizational unit (OU). For this purpose, the OU administrator / ITB applies for an administration account for an employee / himself, with which the employee can then perform his administration tasks.
	KIT Service Account A KIT service account is used to uniquely identify a service in the IT environment of an organizational unit (OU). For this purpose, the OU administrator / ITB applies for a neutral service account for a service, under which this service can then be executed.
	KIT-Benutzerkonto - KIT-Account For all KIT employees, the KIT user account, also known as the KIT account, is the basis for many IT services that users in the KIT network require. It provides access to systems and services and is generally used as a "login" in the KIT environment.
	LDAP access to KIT-AD Access to the KIT-AD via LDAP
	OpenID Connect Provider The OpenID Connect Provider provides authentication and authorization services for web-based single sign-on and for distributed API integration. A self-service web portal for session and token management is also provided.
	Self-Service Portal SCC Self-service portal for students, employees, and guests and partners (GuP). This includes functions related to the personal KIT account, such as password change.
	Shibboleth Identity Provider The Shibboleth Identity Provider provides authentication and authorization with single sign on of users for participating service providers.
	Two-factor authentication at KIT Various services at KIT have increased IT security requirements that go beyond a simple login with user name and password. These include in particular the SAP system and various VPN accesses.
	User management for ITB The designated IT officers (ITB) of a KIT OU have the possibility via this service, among other things, to have a new password randomly generated for accounts of their supervised OU. It is not possible to specify a password yourself. Furthermore, accounts can be removed from groups that are also managed by the group administration for ITB.
	WLAN-Gastkonten Self-service This service enables the IT representative to create temporary WLAN accounts for guests at KIT. These accounts are valid for a maximum of two months and allow guests to get internet access in WLAN and LTA.