Skip to main content

Cornell University

Set Up and Use Shibboleth Non-Person Impersonation

This article applies to: Shibboleth

On This Page

Setup of Shibboleth Non-Person Impersonation using an Exchange Group Account (EGA), and the addition of EGA members to access the account, can only be requested by the EGA owner.

If you and people you work with would like to be able to sign into and use a single account in a Cornell IT service without having to share login or password, and you have an EGA (Exchange Group Account), the owner of the EGA can request that it be set up for Shibboleth Non-Person Impersonation.

Set Up Shibboleth Non-Person Impersonation

To request Shibboleth Non-Person Impersonation, an EGA owner should:

  1. Look up the EGA name using the EAM (Exchange Account Manager) tool. The name begins with ga. and is not the same as the EGA's email address.
  2. Submit a request to Cornell Identity Management and provide:
    • The EGA name
    • Their NetID
    • The NetIDs of members of the EGA who also need to be able to sign into the account. 
You will need to contact Identity Management again anytime you want to provide anyone new with access. 

Use Shibboleth Non-Person Impersonation

Once the Shibboleth Non-Person Impersonation is set, to sign into the shared account:

  1. Begin the login process for the process as usual.
  2. Log in through CUWebLogin with your NetID and password, and confirm using Two-Step Login if asked.
  3. You will be presented with a screen that says, CUWebLogin - Impersonation.
  4. Next to Login as:, click the option box.
    Choose the EGA from the option box
  5. Select the EGA. Illustration of EGA being selected.
  6. Click Login.

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.