Berkleley Lab

Information Technology

You are here: Home / Services / Accounts

Accounts

Published on by Luis E. Corrales.

The IT Division provides several types of Accounts as well as support for all aspects of login and account access control including StrongID, LDAP, AD, account names, and related services.

  • Enterprise Directory Accounts (for all staff and affiliates). Automatically created as part of the HR on-boarding process.
  • Windows Active Directory (which can also be used by Mac users) to access workstations and shared files on the network. Automatically created for staff (and one type of affiliate) – contractors, others upon request.
  • Google Apps Accounts which provide access to Google mail, calendar, sites, and drive/docs.  Automatically created for staff (and one type of affiliate) – contractors, others upon request.
  • SCS cluster Account.  Created upon request
  • Unix server account. Created upon request.

Learn more about Identity Management at the Lab: identity.lbl.gov

Manage passwords: password.lbl.gov

  • Active Directory

    The Active Directory or AD is a Microsoft product that stores computer names, user names, passwords, and other information in a central database so that security access information does not need to be duplicated on every machine. Accounts on Active Directory can only be created for Berkeley Lab employees and affiliates.

  • Basic Accounts (Enterprise Directory Accounts)

    Basic Accounts (Enterprise Directory Accounts) are provided to all staff and affiliates. These accounts
    • are available after the hire date is entered into the HR system and an employee number is assigned.
    • are used to access our business systems (HRIS, FMS, LETS, JHA)
    • are unique - we never assign anyone a username that has been used before (this policy was implemented in 2007)

  • CalNet

    Current students, faculty, and staff affiliated with the university may be issued a CalNet ID. The CalNet ID is a user's username used with their CalNet passphrase, to log into many web-based campus services. 

  • Federated Authentication

    Federated authentication employs technologies such as Shibboleth to allow local identity systems (such as LBNL LDAP) to provide identification to remote (non-LBNL) applications.

  • MultiFactor Authentication (MFA)

    MFA is highly effective at preventing unauthorized access to Berkeley Lab accounts. With MFA, an attacker will not be able to access accounts simply by stealing a user's password.  The attacker must also steal their phone or Yubikey to access their account. Use of MFA is mandatory for all Berkeley Lab staff and affiliates as of December 9, 2019.

Was this page useful?

Send
like not like
Back to Top