Single Sign On (SSO)

The security of your identity and BVSD data are two areas of top concern to me, especially in light of the recent virus attack. With that in mind, I’m excited about the rollout of the next generation of password management and application access at BVSD. 

The BVSD Single Sign-On Portal, my.bvsd.org, is a tool for students and staff to access district and instructional technology resources with one login and from one location. Upon signing in at my.bvsd.org, you will see tiles that will take you to many web-based applications. Rather than needing to type in the URL for each of these applications and sign in, clicking on the tiles will take you directly to them, and in many cases, automatically log you in.

Another key benefit of my.bvsd.org is the ability to reset your password more easily and securely. Should you forget your password and need to reset it, you can do so by clicking “Forgot Password”. You will be prompted to enter your BVSD username. From there you will use the pull down menu to select your recovery option method. You can choose from one of three options:

• Answer three security questions
• Enter your PIN
• Have a new password link sent to your personal email address.

Any of these options will then give you the opportunity to enter a new password.

The first time you log in, you will be prompted to set four security questions, a four-digit PIN, and a personal email address. These all can be used to verify your identity to allow you to change your BVSD password on computers both inside and outside the district. If you do enter a personal email address, please be sure to check your personal email for a message with a verification link to activate this email in the system. If at any time you need to reset your security questions, PIN, or personal email address, you can do so while logged in to the portal.

The new portal, my.bvsd.org, will be available to all students and staff beginning on February 16, 2018. We appreciate your support in proactively managing the security of your identity and BVSD data!

Andrew

Progress Toward One Password

How many usernames and passwords do you have to remember? If you’re like me, you have dozens of online accounts (probably more), and each requires a unique username and password.

Until recently, you also had a different username and password for almost every application you used at BVSD. But now, due to some key changes, that situation is reversing: you are able to use the same information to sign in to multiple BVSD applications.

So what has changed to make this possible?

Password Manager

You should all be familiar with Password Manager by now. This tool changes your password in two places—BVSD’s database (called Active Directory) and Google—which means that you use the same password to sign in to your computer, email, calendar, docs, etc. But you may not know that you can use this same password to sign in to other key BVSD applications:

• Avatar
• Infinite Campus
• Insignia (Library software)
• Lawson
• MediaCAST

Windows — Ctrl-Alt-Delete

We recently introduced the ability to change your password in both Google and Active Directory by pressing Ctrl-Alt-Delete and then following the change password option. You must be on a Windows PC for this option to work.

Google Authentication

Many online applications use Google authentication, which is a process that signs you in using your Google account instead of requiring you to create a new username and password. If you come across an app with the option to “Sign in with Google”, do it! We are working with our vendors to enable Google Authentication whenever possible.

App Launcher

The App Launcher appears at the top right corner of the browser when you are in your email or calendar. Any apps that you find in the App Launcher will automatically log you in when you click them. Click on “More” in the App Launcher to see apps like BrainPOP and VoiceThread.

With a move toward one password I’m hopeful your technology world will get easier to navigate.   

Please chime in with your comments below.

Andrew

Passwords and Account Security

The start of a new school year is a great time to think about BVSD account security. Everyone plays a part in keeping data safe. We in IT manage the servers that store your data and the networks that transmit your data. But the most powerful and effective way to protect BVSD data is for everyone to have a strong password. Like locking your front door, a strong password will deter thieves, especially those looking for an easy way into your account.

During the past year we had several issues with spammers, who were able to send millions of spam/phishing emails via hacked BVSD accounts. Unfortunately, one of these attacks rendered all BVSD email addresses blocked (blacklisted) for several days. Not only were the individual accounts affected, but all BVSD accounts were unable to send or receive messages outside of BVSD.

Incidents like these can be avoided if we all follow a few simple guidelines. 

Create a Strong Password (now required)

1. Create a strong password with at least eight characters and a minimum of three of the four characteristics below (this is a new BVSD requirement):
1. Must have at least one capital letter
2. Must have at least one lowercase letter
3. Must have at least one number
4. Must have at least one symbol
5. Click Here to change your password now
   
2. Change your password every 90 days (planned implementation in January).
3. Don’t reuse the same passwords.
4. Don't use repeating digits like 1111, 7777.

Keep Your Password Safe

1. Don’t share your password with anyone.
2. Don’t use the same password for multiple services.
3. Don't send your password in an email or instant message. IT will never ask for your password. Be suspicious of anyone who asks for your password.

Consider Using a Passphrase
An even better way to create a strong password is to create what is called a passphrase. A passphrase can be an entire phrase or an abbreviation of a phrase. For instance, The quick brown fox jumps over the lazy dog! becomes Tqbfjotld! A passphrase should be:

1. Known only to you   
2. A minimum of eight characters    
3. Hard to guess -- even by someone who knows you well
4. Easy for you to remember       
5. Easy for you to type accurately   

Security is a shared responsibility. We need your help to keep BVSD accounts safe and to keep email running smoothly. 

Please chime in on what you think by first logging into this blog (upper right corner) and then responding. 

Thanks, 
Andrew

Strong Passwords with Required 90 Day Change are Coming

Passwords are one of the strongest proactive measures that individuals can take to keep BVSD data safe and in the right hands. Passwords must never be shared, and IT will never ask for your password.

As we move to the Google environment on April 23, new password requirements will also be implemented.

At first, this type of change can seem daunting.  I know it was for me.

What we'll get from this change is acceptable security as required by our last security audit. The likelihood will also decrease that spam will take over your computer without you even knowing it.

What will change?

After April 23...

1. Passwords will have to be at least 8 characters long.
2. To make them "strong" they must have 3 of the following 4 items:
1. Upper Case
2. Lower Case
3. Number
4. Special Character (a special character is anything but a letter or a number)
3. You'll be required to change your password every 90 days.  This will fix compromised accounts that you may not even know about. (k-5 accounts without email will have a 180 day change period)
4. There will be a new web-based tool that will allow you to change your password from any computer with an internet connection.

Hints for creating strong passwords

One way to remember strong passwords is to create sentences as passwords. For example, "BVSD is a cool place to work in 2012!" meets all 4 criteria and is easy to remember. Don't feel constrained by 8 characters -- sentences as passwords work well, too. 

Click here for more information about creating strong passwords.

Give it a try!

I encourage you to create a strong password before April 23.

• Click here for instructions
• If you are using a Mac, you will need to change your password on a Windows PC until April 23. 

Password Tools

Password Reset Tool

• We currently have a tool that will reset your password if you forget it.

Password Change Tools

• Currently you can change your password on a Windows PC while on the BVSD network. Click here for instructions.
• By April 23 we will also have a new password change tool that will work from any computer with an internet connection.

Please chime in below after you log in. I want to know what you think about BVSD taking security seriously. 

Andrew