CUNY has upgraded to the latest version of the identity management system (IMS) that is used to control access to CUNYfirst and a number of other CUNY applications. As part of the IMS upgrade, a new CUNY Login page has been introduced as the first step in:

  • migrating some applications that use CUNYfirst login credentials (CUNYfirst username and password) for authentication to a single login page
  • enabling single sign-on for some CUNY applications that use CUNYfirst login credentials for authentication

1. Why is there the new CUNY Login page?

CUNY has upgraded to the latest version of the identity management system (IMS) that is used to control access to CUNYfirst and a number of other CUNY applications. As part of that upgrade, the CUNY Login page has been introduced as the entry point for applications and services that use the CUNYfirst login credentials (CUNYfirst username and password) for authentication.

2. What CUNY applications currently use the CUNY Login page?

The CUNY Login page is currently used to log in to:

  • Virtual Bookstore
  • CUNYsmart

Over time, other applications using the CUNYfirst username and password for authentication will be migrated to the CUNY Login page.

3. What is single sign-on?

Single sign-on lets you enter a single username and password once to access more than one application concurrently without having to log in (sign in) to each one separately.

4. What applications currently support single sign-on using the CUNYfirst login credentials?

Single sign-on using the CUNYfirst login credentials is currently enabled only for CUNYfirst and CUNYsmart—once you log in to either of these applications, you can access the other one without logging in again.

For example, if you are already logged in to CUNYfirst, clicking on a link to CUNYsmart will automatically open CUNYsmart. Likewise, if you are already logged in to CUNYsmart, clicking on a CUNYfirst login link automatically opens CUNYfirst.

5. Is the Virtual Bookstore single sign-on enabled?

No, the Virtual Bookstore uses the CUNY Login page for user authentication but is not yet enabled for single sign-on.

6. Do I continue to use the existing CUNYfirst login page to log in to CUNYfirst?

Yes, you will continue to use the existing CUNYfirst login page on cuny.edu.

7. Why can’t I bookmark the new CUNY Login page?

The new CUNY Login page is used to log in to a CUNY application AFTER clicking on a link for that application. If you access the CUNY Login page directly, such as via a bookmark or by manually entering the URL into your browser address bar, you will see an error page because the identity management system(IMS) will not be able to determine which application you are attempting to access.

8. How long can an application remain idle before it times out for inactivity?

The identity management system (IMS) inactivity timeout for CUNYfirst login credentials is 29 minutes. If you exceed the IMS inactivity timeout, the login page displays the next time you refresh a page or click on a link in an applications that uses the CUNYfirst login credentials.

To avoid the IMS inactivity timeout, be sure to refresh a page or click on a link every 29 minutes or less in an application that uses the CUNYfirst login credentials.

9. What happens to my work if I am logged out of my application due to an inactivity timeout?

Once you have exceeded the IMS timeout, the login page displays the next time you refresh a page or click on a link in an application that uses the CUNYfirst login credentials. After logging back in, you are presented with the result of the action that triggered the login page, either a refreshed page or the link’s destination.