Still the Weblogin we all know
Although the login will change, it will still be Weblogin, UiO's login service for online services, that you will encounter after the change on September 22nd. Weblogin has been in use at UiO for many years and is familiar to anyone who has logged into Vortex, Canvas, Panopto, and other web-based UiO services. The major changes are in the underlying technology.
– The change will hardly be noticeable, but we must inform you nonetheless, says section manager Trond Hasle Amundsen from the IT Department. – We have many vigilant IT users at UiO, and for security reasons, we should all be cautious about where we log in, explains Amundsen.
What will it be like?
– The most noticeable change will be the elimination of "number matching" in two-factor authentication, meaning that when you log in, you will no longer be prompted to enter a number displayed on the screen into your Authenticator. This will end now. Additionally, the website where you enter your username and password will have a new address (URL). Currently, it is adfs.uhad.no. After September 22, it will be adfs.uio.no. If you notice that the URL has changed like this, that is completely fine, says chief engineer Francis Augusto Medeiros-Logeay from the IT department's operating systems section reassuringly
Before September 22nd, you will be redirected to "the blue screen" (as seen in the images above) in the second step of the login process, where you will enter your username and password. You will then be taken to two-factor authentication with "number matching."
After September 22nd, you will be redirected directly to Weblogin after you first enter your username and password. There you will enter your password again and proceed to two-factor authentication without "number matching."
Why is the login being changed?
Section manager Amundsen picks up the thread again. – There are several reasons why we are doing this. AD (Active Directory) is an essential component of the login system. The federated login service (ADFS) currently runs in the AD domain "UHAD." This domain has security challenges and will be shut down. Therefore, we are switching to a new ADFS infrastructure in the AD domain "uio." The new infrastructure is newer, more secure, and more robust. Additionally, the new login will be simpler, without "number matching," and what we call SSO (Single Sign-On) will work better, making it necessary for you to log in less often than today. We are also becoming less dependent on Microsoft technology, he concludes.
Summary
There will be a new login, but for you who are logging in, the change will hardly be noticeable. The new login is both more secure and easier, and it utilizes UiO's own Weblogin, which everyone is familiar with.