CUNY has upgraded to the latest version of the identity management system (IMS) used to control access to CUNYfirst and a number of other CUNY applications. As part of the IMS upgrade, a new CUNY Login page has been introduced as the first step in:

  • migrating some applications that use CUNYfirst login credentials (CUNYfirst username and password) for authentication to a single login page
  • enabling single sign-on for some CUNY applications that use CUNYfirst login credentials for authentication

1. Why is there the new CUNY Login page?

CUNY has upgraded to the latest version of the identity management system (IMS) that is used to control access to CUNYfirst and a number of other CUNY applications. As part of that upgrade, the CUNY Login page has been introduced as the entry point for applications and services that use the CUNYfirst login credentials (CUNYfirst username and password) for authentication.

2. What CUNY applications currently use the CUNY Login page?

The CUNY Login page is currently used to log in to:

  • Virtual Bookstore
  • CUNYsmart

Over time, other applications using the CUNYfirst username and password for authentication will be migrated to the CUNY Login page.

3. What is single sign-on?

Single sign-on lets you enter a single username and password once to access more than one application concurrently without having to log in (sign in) to each one separately.

4. What applications currently support single sign-on using the CUNYfirst login credentials?

Single sign-on using the CUNYfirst login credentials is currently enabled for CUNYfirst and CUNYsmart—once you log in to either of these applications, you can access the other one without logging in again.

For example, if you are already logged in to CUNYfirst, clicking on a link to CUNYsmart will automatically open CUNYsmart. Likewise, if you are already logged in to CUNYsmart, clicking on a CUNYfirst login link automatically opens CUNYfirst.

5. Is the Virtual Bookstore single sign-on enabled?

No, the Virtual Bookstore uses the CUNY Login page for user authentication but is not yet enabled for single sign-on.

6. Do I continue to use the existing CUNYfirst login page to log in to CUNYfirst?

Yes, you will continue to use the existing CUNYfirst login page on cuny.edu.

7. Why can’t I bookmark the new CUNY Login page?

The new CUNY Login page is used to log in to a CUNY application AFTER clicking on a link for that application. If you access the CUNY Login page by any method other than clicking on an application link, such as via a bookmark, you will see an error page because the identity management system will not be able to determine which application you are attempting to access.

8. Can I have multiple applications open in separate browsers and devices?

The upgraded identity management system supports a maximum of three concurrent CUNYfirst credential logins in any combination of the following:

  • unique devices (a tablet, a mobile phone and a laptop count as three unique devices)
  • unique web browser applications (Firefox, Chrome and Internet Explorer count as three unique web browsers)
  • an instance of the Virtual Bookstore