Content (41)
Secure Connect uses Beyond Identity to provide passkey login for staff and faculty at Cornell. Instead of using your NetID and password to access a web-based service, with Secure Connect you will use your biometrics to unlock a passkey stored on your device. It's another way to reduce the chances…
For end-users, Microsoft Azure Authentication lets you sign in to Cornell-related Microsoft services, and CUWebLogin lets you sign in to other Cornell services.For the technical audience, Shibboleth is the implementation Cornell uses to manage CUWebLogin.
As a custodian of institutional information, you are responsible for the Cornell data sent, stored, or shared on the information technology (IT) software, services, and devices -- whether personally owned or university-owned -- that you use. This responsibility includes choosing appropriate…
How can Cornell help you protect your computer in the face of mounting online threats? With Certified Desktop, CIT works with your department’s IT staff to make your computer safer.
CrowdStrike is a key component of the Certified Desktop suite of security services.
2025 ArticlesIs your personal, professional, and financial information safe? Follow these essential tips to keep your accounts secure.A Message from Robert Edamala, Chief Information Security OfficerGreetings,It’s that time of year! October is National Cybersecurity Awareness Month (NCSAM), an…
If you are purchasing new software, review this page and submit your request through the Technology Risk Assessment Form.
Network and system administrators can request information security assessments of their networks, systems, programs, and labs through the IT Security Office (ITSO).
BitLocker is a feature of Windows that encrypts your data to keep it safe from unauthorized access. Using BitLocker Whole Disk Encryption (WDE), your entire disk is encrypted. Please consult your security liaison or your local technical support provider before enabling this feature on any…
The Electronic Signature service, using Adobe Sign, gives you the ability to send documents and collect signatures electronically for approval. Adobe Sign works within your existing systems and processes, and the e-signatures are secure and legal. You can also digitize existing signing…
With identity theft due to the loss of online data a major concern these days, Cornell needs to protect sensitive data stored in electronic form, particularly the personal information that students, employees, and others associated with the university have placed under our trust.Why Data Security…
Going online from a personal device like a tablet, phone, or computer creates a pipeline to an immense collection of resources and data, but the sheer size of the Internet also makes it an easy place for bad actors to hide and scope out their victims. Create a ring of protection around devices and…
Get Help for IT Security Problems
Your NetID, along with other login information you use at Cornell, secures a host of services that are available to you as a member of the university community. Following some straightforward practices and guidelines will keep your identity, computer,…
Identity and Access Management is provided through a suite of mission-critical services, which support secure access to Cornell's IT services and systems. Implementing a set of tools, policies, and practices to manage authentication helps safeguard university data and ensures that only authorized…
The IT Security Office provides vulnerability scanning tools for devices, websites and applications. The Managed Server Service team supports vulnerability scanning for CIT Managed Server customers.
Slowness, Zoom issues, and other problems on MacOS (April 2026)A recent update to the Cisco client has caused performance issues on some MacOS devices. If you use VPN from an un-managed device (a computer not administrated by Cornell), CIT recommends deleting the Cisco Secure Client Socket Filters…
On Tuesday, April 28, CIT planned to implement an updated, more secure version of Duo multi-factor authentication (MFA) for Microsoft applications on desktop and the web. This change will be re-implemented at a later date.
LastPass is a password management service that stores all your passwords in one secure vault, which you protect with a single master passphrase. It is a browser extension and mobile app that works across operating systems and device types.
Locked out of your NetID? If you've previously set up security questions or a recovery email, you can reset your password through self-service.
The information in this article is intended for technical staff who create, maintain, and support applications that require authentication. Most Cornell faculty, students, and staff do not need this information.Shibboleth Identity Provider (IdP) is an open-source implementation of web single sign…