CUNY upgraded its identity management system (IMS) that controls access to CUNYfirst. This IMS upgrade also provides the opportunity to implement a single set of login credentials, leveraging users’ existing CUNYfirst username and password, to access other CUNY applications and services besides CUNYfirst.

The single set of login credentials is called your CUNY Login. Once an application or service transitions to the CUNY Login, you will enter your login credentials as follows:

Username: CUNYfirst username@login.cuny.edu

Password: CUNYfirst password

The benefits of moving to the CUNY Login include:

  • One set of login credentials—You do not have to remember a separate username and password to access each application and service
  • CUNYfirst inheritance—You can leverage what you already know, your CUNYfirst login credentials
  • Single sign-on—You only have to log in once for concurrent access to single sign-on enabled applications and services

CUNY applications and services will transition to the CUNY Login over time. The tabbed sections that follow provide answers to frequently asked questions to help users during the transition to the CUNY Login credentials.

Why is there a new Virtual Bookstore/CUNYsmart login page?

The Virtual Bookstore/CUNYsmart login page was introduced to allow users to access the Virtual Bookstore and CUNYsmart using their CUNYfirst login credentials (CUNYfirst username and password) for authentication.

What CUNY applications currently use the Virtual Bookstore/CUNYsmart login page?

The Virtual Bookstore/CUNYsmart login page is currently used to log in to:

  • Virtual Bookstore
  • CUNYsmart

Do the Virtual Bookstore or CUNYsmart use the new CUNY Login credentials?

No, the Virtual Bookstore and CUNYsmart use your CUNYfirst username and CUNYfirst password to log in.

Do I continue to use the existing CUNYfirst login page to log in to CUNYfirst?

Yes, you will continue to use the existing CUNYfirst login page on cuny.edu.

Why can’t I bookmark the Virtual Bookstore/CUNYsmart login page?

The new Virtual Bookstore/CUNYsmart login page is used to log in to the Virtual Bookstore or CUNYsmart AFTER clicking on a link for that application. If you access the Virtual Bookstore/CUNYsmart login page directly, such as via a bookmark or by manually entering the URL into your browser address bar, you will see an error page because the identity management system (IMS) will not be able to determine whether you are attempting to access the Virtual Bookstore or CUNYsmart.

How long can an application remain idle before it times out for inactivity?

Inactivity timeouts vary by application as listed below:

Virtual Bookstore – 60 minutes
CUNYsmart – 30 minutes

If an application times out for inactivity, you are presented with the login page to authenticate again to that application.

To avoid timing out of an application, reset its inactivity timer by returning to the application and refreshing a page or clicking on a link before reaching the timeout limit.

What happens to my work if I am logged out my application due to an inactivity timeout?

Once you have exceeded the application timeout, the login page displays the next time you refresh a page or click on a link in the application. After logging back in, you are presented with the result of the action that triggered the login page, either a refreshed page or the link’s destination.

How many failed login attempts does the Virtual Bookstore and CUNYsmart login page allow?

Access to the Virtual Bookstore and CUNYsmart is locked after five failed login attempts.

Please contact your campus help desk for assistance in unlocking your CUNY Login credentials.

Is the Virtual Bookstore single sign-on enabled?

No, the Virtual Bookstore is not currently enabled for single sign-on.

Why is there the new CUNY Login page?

CUNY is transitioning to a single set of login credentials, called the “CUNY Login,” for CUNY-wide applications and services. The CUNY Login page has been introduced as an entry point for applications and services that use the CUNY Login credentials (CUNYfirst username@login.cuny.edu and CUNYfirst password) for authentication.

What CUNY applications currently use the CUNY Login page?

The CUNY Login page is currently used to log in to Blackboard, DegreeWorks and FACTS.

The list of applications using the CUNY Login page will grow as applications transition to the CUNY Login.

Why do the CUNY Login credentials incorporate the CUNYfirst login name and password?

The identity management system (IMS) that provides user authentication and access control for CUNYfirst can now provide user authentication and access control to other applications and services as well. Since students, faculty and staff already have CUNYfirst login credentials, CUNY is leveraging the CUNYfirst username and password as the basis for the CUNY Login credentials.

Why does the CUNY Login require “@login.cuny.edu”?

Adding “@login.cuny.edu” to the CUNYfirst username provides the simplest username format to satisfy the broadest user authentication and access control requirements for University and third-party hosted applications.

To simplify the user experience for the CUNY Login page, “@login.cuny.edu” is prepopulated.

Do I continue to use the existing CUNYfirst login page to log in to CUNYfirst?

Yes, you will continue to use the existing CUNYfirst login page on cuny.edu until CUNYfirst transitions to the CUNY Login.

What is single sign-on?

Single sign-on lets you enter a single username and password once to access more than one application concurrently without having to log in (sign in) to each one separately.

For example, if you are already logged in to Blackboard, clicking on a link to DegreeWorks will automatically open DegreeWorks. Likewise, if you are already logged in to DegreeWorks, clicking on a Blackboard link automatically opens Blackboard.

Conversely, when you log out of one single sign-on enabled application, you log out of all currently active single sign-on enabled applications.

What applications currently support single sign-on using the CUNY Login credentials?

The CUNY Login credentials currently provide single sign-on access to the following applications:

Blackboard
DegreeWorks
FACTS

Once you log in to any of these applications, you can access the others without logging in again.

For example, if you are already logged in to Blackboard, clicking on a link to DegreeWorks will automatically open DegreeWorks. Likewise, if you are already logged in to DegreeWorks, clicking on a Blackboard link automatically opens Blackboard.

Why can’t I bookmark the new CUNY Login page?

The new CUNY Login page is used to log in to a CUNY application AFTER clicking on a link for that application. If you access the CUNY Login page directly, such as via a bookmark or by manually entering the URL into your browser address bar, you will see an error page because the identity management system (IMS) will not be able to determine what application you are attempting to access.

Although a bookmark to the CUNY Login page will not work, you can bookmark the link used to open the CUNY Login page for a specific application.

How long can an application remain idle before it times out for inactivity?

Inactivity timeouts vary by application as listed below:

Blackboard – 180 minutes (3 hours)
DegreeWorks – 55 minutes
FACTS – 55 minutes

If an application times out for inactivity, you are presented with the CUNY Login page to authenticate again to that application.

To avoid timing out of an application, you can reset its inactivity timer by returning to the application and refreshing a page or clicking on a link before reaching the timeout limit.

What happens to my work if I am logged out my application due to an inactivity timeout?

Once you have exceeded the application timeout, the login page displays the next time you refresh a page or click on a link in the application. After logging back in, you are presented with the result of the action that triggered the login page, either a refreshed page or the link’s destination.

What are the differences between an inactivity timeout and logging out of an application?

An inactivity timeout logs you out of a specific application.

Logging out of an application that is not single sign-on enabled logs you out of that application only.

Logging out of an application that is single sign-on enabled logs you out of all active single sign-on enabled applications.

How many failed login attempts does CUNY Login allow?

The CUNY Login locks an account after five failed login attempts through the CUNY Login page.

Note that once the CUNY Login credentials are locked, the lockout prevents access to all applications and services using the CUNY Login page for access control.

Please contact your campus help desk for assistance in unlocking your CUNY Login credentials.

Why does the CUNY Login page display after clicking the Blackboard link in the CUNY Portal?

Blackboard now uses the CUNY Login credentials. As a result, users are redirected to the CUNY Login page when clicking on the Blackboard link in the CUNY Portal if they are not already logged in.

Why do I get redirected to the CUNY web site after clicking the DegreeWorks or FACTS link in the CUNY Portal?

As part of the DegreeWorks and FACTS upgrade, new DegreeWorks and FACTS web pages were added to the CUNY web site that include login links and supporting application information and frequently asked questions (FAQs). The login links on the new DegreeWorks and FACTS web pages take users to new CUNY Login page if they are not already logged in to another single sign-on enabled application.

Why does the Application Selection page display when I log in to DegreeWorks or FACTS?

The Application Selection page displays if you have affiliations with multiple colleges and the DegreeWorks or FACTS login link used did not specify a college. Select the college from the Application Selection page to finish logging in.

What are the CUNY Login credentials for users without a CUNYfirst account?

Some Blackboard users as well as students at the Graduate Center and the School of Journalism do not have a CUNYfirst account from which the CUNY Login credentials are derived.

These users should append “@login.cuny.edu” to their CUNY Portal username and use their CUNY Portal password when presented with the CUNY Login page.

To simplify the user experience for the CUNY Login page, “@login.cuny.edu” is prepopulated for all users.

What are the CUNY Login credentials for users without a CUNYfirst account?

Some Blackboard users as well as students at the Graduate Center and the School of Journalism do not have a CUNYfirst account from which the CUNY Login credentials are derived.

These users should append “@login.cuny.edu” to their CUNY Portal username and use their CUNY Portal password when presented with the CUNY Login page.

To simplify the user experience for the CUNY Login page, “@login.cuny.edu” is prepopulated for all users.

See the CUNY Login page FAQS for more information on using the CUNY Login page.