Identity Access and Management (IAM) manages the data relating to your digital identity, associated systems, and resource privileges across the University. IAM ensures that you have access to the systems and resources that you need while protecting the University's systems and resources from unauthorized access.
If you have a question that is not answered here, please contact Identity & Access Management.
Authentication is how systems and services confirm your identity when you log in with your CNetID and password.
Authorization is used to confirm that you have access to systems and services that you have been given permission to access. Some access is provisioned automatically because of your status as a faculty, student, or staff member of the University. Some access must be granted locally by service owners to those who require access to that service or system. Some examples of UChicago systems that require user authorization include University wireless, VPN, Canvas, myUChicago, and Workday.
No, you do not need both. Suppose you are a UCMEDID holder (Hospital employee). In this case, you may use your UCMEDID and password to access the University wireless network and other services on the University side to which you are eligible. However, if you have both a UCMEDID and a CNetID (which can happen if you are a University employee who has access to Hospital systems), you must use your CNetID and not your UCMEDID to access University services. Most of the time, your CNetID and UCMEDID are the same, but not always. UCMEDIDs and CNetIDs are synchronized on a regular basis.
Once your new staff member has been set up to claim a CNetID, that person may go to the Create CNetID website to claim a CNetID and password.
There are two ways to set up user authentication for your service. Students can either log in to the new system using LDAP, or they can sign in using single sign-on, for which we recommend using Okta.
The University issues all University community members a unique identifier called the ChicagoID. The ChicagoID is the University's replacement for your Social Security Number. All employees of the University provide their SSN to their Human Resource Partner (HRP) or Trusted Agent (TAG) when they join the University. After that, the ChicagoID can be used as an SSN replacement every place where your SSN is required. Each ChicagoID consists of eight numerical digits followed by one letter, for example, 12345678A. You can find your ChicagoID by visiting Who am I, log in with your CNetID and password, then look up your listing.
Note: We have identified an issue with ID claims for alumni who have not previously claimed their CNetID, which can only be resolved by obtaining the ChicagoID. If you are an alumnus who has yet to claim CNetID and are having issues using the Phoenix/Alumni ID, please contact the Alumni Office at alumni@uchicago.edu or 800.955.0065 to obtain your ChicagoID to process ID claims.
The UChicago Card is the official University identification card. UChicago Cards are issued to all students enrolled in credit programs, faculty, full-time staff, and academic employees. You can get your UChicago Card at the ID & Privileges Office, located in room 100F in the lobby of the Joseph Regenstein Library. Incoming first-year students receive their cards during Orientation. You must bring a government-issued photo identification (for example, a driver's license, passport, or state ID card). Part-time and temporary staff members are not eligible for UChicago cards, but their departments may elect to provide them with a Campus card. Learn more about the UChicago card, the Campus card, and other carding options at the UChicago Cards website.
WhoAmI is a UChicago application that displays identity information about current and former university community members. Students may only view their own record. Full-time, benefits-eligible staff may also look up other people and view details about their identities based on a search by name, CNetID or ChicagoID.
This includes current and former: