1601 PR.08 Sponsored Identity Access

Revision Date: 
April 5, 2017

Contents

  • Definitions
  • Sponsored Identity Appropriate Usage
  • Eligible Users
  • Ineligible Users
  • Requesting a Sponsored Identity
  • Authorization
  • PIN Request
  • Access Expiration
  • Access Review and Attestation
     

Definitions

Affiliation - When an individual’s effort supports the research, education, clinical, administrative, or other functions of Yale University, yet they do not meet the criteria of being a Student, Employee, Contingent Worker, or other Yale identity type.

Dummy Identity - A digital identity that is not based on the identity of an actual person, which is used solely for training and testing purposes at Yale. This Sponsored Identity type requires additional approval and is used mainly in central units.

Members – A person that typically receives Non-Alumni University services, typically all Students, Staff, Faculty and Employees are members, along with selected other associations.

Sponsor - An individual with an active identity at Yale, who belongs to the Department requesting the Sponsored Identity, and who will be linked to the Sponsored Identity record.

Sponsored Identity - An individual with a Yale Affiliation that requires either a NetID to securely access a Yale system(s), in order to perform their duties or an ID Card to obtain physical access to Yale. Note that Dummy Identities that require an associated NetID and password in order to fulfill Yale training or testing objectives and is not covered within the Responsible NetID procedure.

Sponsored Identity Appropriate Usage     

A Sponsored Identity is used under the following criteria:

  • When an individual, based on their Yale Affiliation, requires a NetID and password in order to securely access a Yale system (may include email if appropriate and within policy), yet does not meet the criteria of being a Student, Employee, or Contingent Worker.
  • When an individual, based on their Yale Affiliation, requires physical access to Yale buildings), yet does not meet the criteria of being a Student, Employee, or Contingent Worker.
  • When a NetID and password are required for training or testing, and the NetID must be associated with a Dummy Identity in HR system in order to fulfill training or testing objectives.

Eligible Users

The following populations are eligible to become Sponsored Identities:

Chaplains Office Religious Affiliates—Individuals involved in campus ministries and need access to Yale systems or buildings based on the affiliation with Yale.

Clinical Practice Staff—Individuals involved in the clinical practice/patient care that are not employed by Yale University or working a contingent worker that require access to Yale systems or buildings based on affiliation with Yale. Clinical Staff whose activity is billed through YSM do not qualify as Sponsored Identities.

Clinical Research Affiliates—Individuals involved in clinical research (may include study patients, data collection or clinical research collaborators from other institutions) that require access to Yale systems or buildings based on affiliation with Yale.

Consultants - Consultants that are paid by outside consulting firms but work as directed by Yale and have their payments authorized by Yale by hours worked.

Contractors (this includes Vendors) –Employee of a Contractor (includes subcontractors of contractors) working at Yale that require a Net ID (e.g. HVAC Contractor that requires a NetID to monitor remote systems) or an ID Card for physical access.

Daycare Staff – Employees at Yale University Affiliated Daycare centers including Bright Horizons at West Campus, Calvin Hill Day Care Center, Edith B. Jackson Child Care Program, and Phyllis Bodel Childcare Center at Yale School of Medicine that need building and possible system access.

Dean/Director/Head of College - Members of Dean and Head of College Families that require access to Yale systems or buildings.

Minor Student Non Research/Clinical—Minors under the age of 18 participating in non-research and non-clinical activities under the individual mentorship and supervision of a faculty member.  Includes minors participating in Yale Programs for Children and Youth activities. Application required in addition to Sponsored Identity https://ehsis.yale.edu/EHSIntegrator/Registration.

Minor Student Research/Clinical—Minors who are 16 or 17 years of age participating in approved educational research and/or clinical activities under the individual mentorship and supervision of a faculty member. Application required in addition to Sponsored Identity https://ehsis.yale.edu/EHSIntegrator/Registration.

Research Affiliates – Individuals involved in research collaboration or efforts that require access to Yale systems or buildings. Residential College Associate Fellows - Residential College Associate Fellows that require access to Yale systems or buildings.

Residential College Associate Fellows – Individuals with Residential College Associate Fellow appointments as approved by Yale College.

Spouses or Same Sex Civil Union Partners of Faculty, Employees or Graduate Students (not receiving benefits) – Faculty, Employee or Graduate Student spouses or same sex civil union partners that require access to Yale systems or buildings.

Testing/Training IDs (Central Use only)- A digital identity that is not based on the identity of an actual person, which is used solely for training and testing purposes, and is not covered within the Responsible NetID procedure.

University Committee Members – Individuals on university committees—for example HRPP or IACUC—that require access to Yale system in order to complete training requirements and access Yale systems.

Vendors (See Contractors)

Visiting Undergrad Non-Research/Clinical—Undergraduate students 18 years of age or older who are currently enrolled in accredited degree-granting institution other than Yale participating in non-research and non-clinical activities under the mentorship of a Yale faculty member. Application required in addition to Sponsored Identity https://ehsis.yale.edu/EHSIntegrator/Registration.

Visiting Undergrad Research/Clinical—Undergraduate students 18 years of age or older who are currently enrolled in an accredited degree-granting institution other than Yale participating in approved educational research and/or clinical activities under the mentorship of a Yale faculty member. Application required in addition to Sponsored Identity https://ehsis.yale.edu/EHSIntegrator/Registration.

Visitors– Short term visitors that do not fall into the Visiting Student (includes Minors) Categories and do not require formal approval from Provost or Post Doc Office that may need access to Yale systems or buildings.

Volunteer Athletic Coaches – Volunteer coaches in the Athletic Department that need access to Yale systems or buildings. 

Volunteers – Yale Volunteers that require secure access to Yale systems or buildings.

Yale Agency Affiliates (Non-Paid) - Individuals that are employees of official Yale Agency Accounts that are not paid through Yale Payroll yet need access to Yale systems or buildings.

Yale Alumni Development Volunteers - Development Volunteers that require secure access to Development Y-Portal.

Yale Press London Employees – Employees of Yale Press based on the London office that require secure access to Yale systems.

Yale Tenant – Individual that needs physical access to Yale space as they or their company rent space in a Yale owned building.

Ineligible Users

The following individuals and groups are not eligible for access to the Yale Sponsored Identity services:

  • Agency Account Associates (Paid on Yale Payroll)
  • Alumni
  • Consultants (non-SOW)
  • Contingent Workers
  • Employees
  • Faculty (current and retired)
  • Faculty Spouses (receiving benefits)
  • Members
  • Postdocs
  • Temporary Staff/Interns
  • Voluntary Faculty
  • Visiting Graduate and Professional Students
  • Yale Students (undergraduate, graduate, and professional)
  • Anyone with an active identity record and existing NetID

The following individuals and groups are not currently eligible for access to the Yale Sponsored Identity services, since they only require physical access, but may be eligible once the ID Center decommissions their current Temp Card System later in 2017:

  • Summer Students

These individuals and groups will continue to use existing ID Card Center procedures for physical access until notified.

Requesting a Sponsored Identity

Only an active Faculty or Staff member can request a Sponsored Identity, or request changes to an existing Sponsored Identity.

The request process is as follows:

  1. Enter a request via the Sponsored Identity application. 
  2. The Sponsored Identity application will generate emails to all approvers and inform requestee of status of the request via email.

The Lead Administrator/Operations Manager will contact the requestor directly if additional information is required.

Sponsored Identities must be linked to a department through a Workday Supervisory Organization (SO).  The Workday SO identifies the appropriate approvers for the identity as well as the department responsible for the oversight of the sponsored identity record.   In addition, you will need to provide an Oracle Home Organization number until Oracle is decommissioned.

Sponsored Identity records may be linked to a current employee (Sponsor) when needed. Linkage to an employee (Sponsor) ensures that when that employee terminates, all Sponsored Identities associated with them will be reviewed and either reassigned to another employee or terminated. An example would be when a Principal Investigator (PI) needs an individual to have a Sponsored Identity related to their research and then leaves the University. 

Authorization

Lead Administrators or Operations Managers review and authorize requests for sponsored identities.

If for any reason a Sponsored Identity request is rejected, the requester will be informed with the reason for rejection.

PIN Request

The department business office is responsible for requesting a PIN for the Sponsored Identity’s NetID, via email to helpdesk@yale.edu.  They will then notify the Sponsored Identity and provide them with the NetID and PIN, as well as instructions on how to activate the PIN . PIN Activation website can be found at https://veritas.its.yale.edu/netid/ActivatePreLogin_Prepare.do;jsessionid=CE8C2D4092009E0F201D4B3D84D057A5.

Access Expiration

All Sponsored Identities will have an “end date” associated with their identity, that when reached, will automatically remove access rights.  Prior to official termination, the responsible departmental approvers will receive an advance notification of the impending termination.  Notification is sent 30 days prior to the end date on the record and a reminder is sent 10 days prior to termination.  If no action is taken, the identity will automatically terminate.

Eligible users who become ineligible because their Yale affiliation has changed must have their Sponsored Identity deactivated via the Sponsored Identity System.

If an individual is hired into Workday or becomes a student in Banner, the Sponsored Identity record will be automatically terminated.

Access Review and Attestation

Sponsored Identities must be reviewed on a regular basis to ensure that they are still required to support the research, education, clinical, administrative, and other functions of Yale University.  Please refer to the Monthly Financial Review Checklist for guidelines.