CAS user account and password ****************************************************************************************** * ****************************************************************************************** To ensure that every student and employee of Charles University can use all its online ser a User Account within the Central Authentication Service (CAS). A CAS account represents your electronic identity – it allows you to securely access the s Charles University using a single sign-on. This means you don’t need to remember different the Student Information System (SIS), university email, libraries, or other applications — for you. ****************************************************************************************** * What do you need advice on? ****************************************************************************************** CAS User Account How do I obtain a CAS account? • Every student and employee automatically receives CAS account when they are admitted to University. Applicants receive one during the admission procedure. • During your first login to CAS, we recommend that you set a password and also configure recovery method (telephone number or email), so your account can be easily restored if y password. What is the CAS account used for? Your CAS account [ URL "https://ldapuser.cuni.cz/language/switch?lang=en"] is your electro is used to verify your identity when accessing applications or information systems of Char (and external systems): • university applications [ URL "https://cuni.cz/UKEN-18.html"] • faculty information systems, • logging in to PCs, • password management for other systems: • for eduroam [ URL "https://uvt.cuni.cz/UVTEN-60.html"] and dormitory networks • domain JINONICE • eduID.cz [ URL "https://www.eduid.cz/en/index"] federation, enabling access to many serv especially: • issuing personal certificates TCS [ URL "MYLIFEEN-27.html "] , • CU electronic resources portal [ URL "https://cuni.primo.exlibrisgroup.com/discovery/s vid=420CKIS_INST:DB&lang=en"] • medical education portals - MEFANET [ URL "https://www.mefanet.cz/index-en.php"] , • e-learning system - Moodle [ URL "https://elearning.cuni.cz/english/"] . What are the advantages of a CAS account? • One login for multiple university services. • Higher security – central authentication protected by a password (and optimally two-fact authentication). • Easier account management – password changes apply automatically across all services. Why use two?factor authentication and how does it work? To increase the security of your CAS account, we recommend enabling two-factor authenticat "https://uvt.cuni.cz/UVTEN-221.html"] . During login, after entering your password, you must confirm your identity through a secon usually via CU Key mobile app [ URL "https://uvt.cuni.cz/UVTEN-222.html"] . Apart from the CU Key, you can use other methods of two-factor authentication, e.g. hardwa "https://uvt.cuni.cz/UVTEN-223.html"] or verification via text message [ URL "https://uvt. UVTEN-224.html"] . The university is currently in the process of implementing mandatory use of two-factor aut during logging in to university systems. How do I log in to CAS? To log in to CAS [ URL "https://ldapuser.cuni.cz/language/switch?lang=en"] , use your pers number (eight-digit number located on your CU card below your photo). Enter your password — either your current one or the initial password issued by the CU car [ URL "https://cuni.cz/UKEN-135.html"] . How do I find my username? Your CAS username is your eight-digit personal university number, found: • on your CU card [ URL "MYLIFEEN-19.html "] below your photo, • in the email you received when you first set your CAS password. I can’t log into CAS — what should I do? I forgot my password or it’s not working There may be several reasons for why you cannot log into CAS — forgotten password, expired compromised account. Recommended steps: Try resetting your password online • The fastest way is to visit password recovery portal [ URL "https://ldapuser.cuni.cz/idp • After verifying your identity (email, SMS, NIA), you can set a new password. Visit a service office — if online recovery is not possible • If online password recovery fails, visit CU card issuing center [ URL "https://cuni.cz/U or an authorized faculty office [ URL "https://ldapuser.cuni.cz/language/switch?lang=en" • You will receive an initial password, which must be changed [ URL "https://ldapuser.cuni within 5 days. Suspicion of account compromise • If you suspect misuse (unusual activity, unknown logins), immediately contact the CU CSI "https://csirt.cuni.cz/en/incident_reporting/"] . Important: Even after changing your password, your data may remain accessible on devices w previously logged in, so always report suspected incidents. I can’t log in even though my credentials are correct Try closing old browser sessions, clearing cache/cookies, or using another browser. Where can I get help? Use the Login issues [ URL "https://servicedesk.cuni.cz/marketplace/formcreator/front/form id=1634"]  form in ServiceDesk. CAS Password – setup, change, recovery Setting and changing your password What is the initial password and where do I get it? The first initial password to the Central Authentication Service (CAS) was assigned to you you issued your CU card [ URL "MYLIFEEN-19.html "] or at your request (e.g. when losing yo or when replacing an unverified password), either by the CU card issuing centre [ URL "htt UKEN-135.html"] or by authorized faculty office [ URL "https://ldapuser.cuni.cz/language/s The initial password is used ONLY to set the password (so-called verified) to CAS [ URL "h ldapuser.cuni.cz"] . It cannot be used for logging into other CU information systems. It is valid for 5 calendar days only. After the expiry of this period, it becomes null and be extended or reused in any way. How do I change my initial password and set my own? • It is not necessary to visit the CU Card issuing centre to set a new password. You can c password yourself after logging in. • Firstly, you must log in to CAS [ URL "http://ldapuser.cuni.cz"] . • Use the university personal number (eight digits) under your photo on the CU card [ UR "MYLIFEEN-19.html "] as your login name. • In the "Password" box, enter your initial password assigned by the CU Card issuing cen authorised faculty office. • After logging in, go to the menu item on the left "Password for CAS" and select "Chang password [ URL "https://ldapuser.cuni.cz/account/password/nomenu/1"] ". • Set your NEW - verified password here. The rules that a new password must comply with clearly listed here. • If you do not know or have forgotten your password, follow the chapter "I forgot my pass doesn't work" What password to choose? The rules for creating a suitable password are directly defined after logging in to your C the New Password setting [ URL "https://ldapuser.cuni.cz/account/password/nomenu/1"] step) How often to change your password? • Although the password is well thought out and strong, the longer it is used, the more li be broken through, which can lead to misuse of your account. It is therefore recommended password regularly [ URL "https://ldapuser.cuni.cz/account/password/nomenu/1"] . • Within the CAS access rules, this is once a year. You will be informed by email about th your password in time (one month in advance). The email will also indicate the exact exp old password. How do I extend the validity of my password? You can extend the validity [ URL "https://ldapuser.cuni.cz/account/password"] of your pas your password. If your faculty policy allows it, you can reuse your original password as w How to handle the password? • Be careful when entering your password and pay attention to your surroundings. • Never share your password with others. • Always log out when logging in on a public internet network. • Remember your password, if you need to write it down, use applications designed for pass e.g. Keepass [ URL "https://keepass.info/"] etc. How do I change my current password? • If you know your current password, it is not necessary to visit the CU Card Issuing Cent a new password. You can change your password yourself after logging in. • First, you must log in to your CAS account [ URL "https://ldapuser.cuni.cz/"] . • Use the university personal number (eight digits) under your photo on the CU card [ UR "MYLIFEEN-19.html "] as your login name. • In the "Password" box, enter your current password, or the initial password assigned b issuing centre or by the authorised faculty office. • After logging in, go to the menu item on the left "Password for CAS" and select "Chang CAS [ URL "https://ldapuser.cuni.cz/account/password/nomenu/1"] ". • Here you set your NEW (verified) password. The rules that the new password must comply clearly listed here. • If you don't know the password or have forgotten it, follow the section "Forgot my passw doesn't work" The CAS password has expired - how should I proceed? • The password expiry date information was sent to your email address a month in advance. period, the password will no longer work for logging in to applications, but it can stil the CAS user portal for 6 months. • If your password expired less than six months ago (and you still remember it), you can u to log in to the CAS portal and reset your password [ URL "https://ldapuser.cuni.cz/acco nomenu/1"] . • Otherwise follow the same procedure as if you forgot your password according to the chap Password - Password Recovery" Forgotten Password - Password Recovery If you have forgotten your password, you can set a new one through the Password recovery p "https://ldapuser.cuni.cz/idportal/reset/methods?lang=en"] . To verify your identity, use one of the available methods: Email password recovery If you have an email address set up in your CAS account, you can reset your password [ URL ldapuser.cuni.cz/idportal/reset/inquiry?lang=cs"] . SMS password recovery • If you do not know the valid password, but you have a phone number set for your account, verify your identity by sending a check SMS message and you can set a new password [ URL ldapuser.cuni.cz/account/password/nomenu/1"] . • If you don't know the password and you don't have a set phone number, you must follow th procedure as if you don't have a password at all - visit CU Card issuing centre [ URL "h UKEN-135.html"] or authorized faculty office [ URL "https://ldapuser.cuni.cz/language/sw Password recovery using NIA You can also reset your CAS password using the Public Administration tool - NIA [ URL "htt UVTEN-213.html"] . Password recovery using SvipeID You can also reset your CAS password using the SvipeID [ URL "https://uvt.cuni.cz/UVTEN-21 Personal visit If you have forgotten your password, follow the same procedure as if you don't have a pass Card issuing centre [ URL "https://cuni.cz/UKEN-135.html"] or authorized faculty office [ ldapuser.cuni.cz/language/switch?lang=en"] . Verified and unverified password - what is the difference between them? You can find information about what type of password you currently have set by logging int "http://ldapuser.cuni.cz"] in the Account Information/Password Type tab. What is a verified password and how do I get it? The verified password is the standard and recommended type of password for the CAS account after verifying your identity. You can verify your identity in two ways: • personal visit CU Card issuing centre [ URL "https://cuni.cz/UKEN-135.html"] or authoriz office [ URL "https://ldapuser.cuni.cz/language/switch?lang=en"] and presenting a photo • online through the portal for remote identity verification [ URL "https://ldapuser.cuni. reset"] and using the NIA [ URL "https://uvt.cuni.cz/UVTEN-213.html"] , or SvipeID [ URL uvt.cuni.cz/UVTEN-219.html"] . A verified password allows you to use all university systems and services without restrict What is an unverified password and how do I get it? An unverified password is a password with a lower level of trust. It only serves as a temp emergency solution if, for some reason, your identity cannot be verified in the standard w It can be obtained without a personal visit to the card issuing centre or ahtorized facult set an unverified password online in two ways: • in the CAS account [ URL "http://ldapuser.cuni.cz/reset"] via the password reset form, b and e-mail invitation to the contact details registered in CAS, • in emergency cases using special methods available in the portal for remote identity ver "https://ldapuser.cuni.cz/idportal/reset"] (only if more trustworthy authentication meth When setting an unverified password, you are always reminded of this fact. Important notice: An unverified password may restrict you from using certain university se example: • login to all systems may not work, • cannot set access to the eduroam network, • it may not be possible to apply for a personal certificate, • some faculties only require a verified password. Therefore, use an unverified password only temporarily and set a verified password as soon Services requiring verified passwords • eduroam network [ URL "MYLIFEEN-24.html "] , • domain JINONICE, • LF computer network in Pilsen (STUDENTS domain), • personal certificates TCS [ URL "MYLIFEEN-27.html "] . Frequently Asked Questions (FAQ) I log in to CAS but not to SIS, what should I do? • You may have been denied access by the app because you lack permission to work with it. student or a CU employee to join SIS. Especially for candidates after enrolment, it is p your study department has not yet modified your relationship in the SIS database and the not allow you to log in, in this case contact the Faculty Administrator of IS Studium [ uvt.cuni.cz/UVTEN-42.html"] . I have a problem with multifactor (MFA) authentication. • In the first step, log into your CAS account and check your Multifactor Authentication s necessary, make a new setting [ URL "https://ldapuser.cuni.cz/idportal/mfa"] . Choose fr methods, we recommend CU Key mobile app and Text message code. Follow the two-factor aut process. CAS password cannot be changed - weak password • The rules for creating a suitable password are directly defined after logging into your the New Password setting [ URL "https://ldapuser.cuni.cz/account/password/nomenu/1"] ste How do I change my contact details? • You can change your contact details after logging into your CAS account [ URL "http://ld in the "Change Contact Information" section. Where can I get a verified password? • The verified password is issued by CU Card issuing centre [ URL "https://cuni.cz/UKEN-13 authorized faculty office [ URL "https://ldapuser.cuni.cz/language/switch?lang=en"] Services requiring verified passwords: • Eduroam network [ URL "MYLIFEEN-24.html "] , • domain JINONICE, • LF computer network in Pilsen (STUDENTS domain), • personal certificates TCS [ URL "MYLIFEEN-146.html "] . Support, Helpdesk If you have not found an answer to your question on this page, please contact Servicedesk issue [ URL "https://servicedesk.cuni.cz/marketplace/formcreator/front/formdisplay.php?id= Important Links • Recovering your CAS password via identity verification - NIA [ URL "https://uvt.cuni.cz/ • Recovering your CAS password via identity verification - SvipeID [ URL "https://uvt.cuni UVTEN-219.html"] • How to set up a two-factor authentication [ URL "https://uvt.cuni.cz/UVTEN-218.html"]