Child pages
  • UCPath-specific SP changes

This page outlines details of transitioning SPs to leverage UCPath EMPLID as part of the UCPath go live process. 


SP NameEMPLID Required?Attribute Replaced by EMPLIDTransition to EMPLID (without impacting users)NotesLocations
Connexxus (travel)

Only for locations relying on UCPath-provided data feeds. 


ePPN

UC Travel staff will reach out to IAM teams to coordinate transition in advance each location's UCPath go live. 

Location provides an ePPN=>EMPLID cross walk file immediately after UCPath final conversion. Travel office, travel vendor and location coordinate update of user profiles and SSO changes shortly after go live. 


Not every location leverages the UCPath-provided Connexxus travel feeds. 

Because the vendor starts receiving data feeds from UCPath immediately post location go-live, this conversion and SSO change needs to be made very shortly after UCPath go live.

Locations not leveraging the UCPath feed may still require updates to SSO or data feed configurations post-UCPath go-live.

ALL(ish)
UC Decision Support (UCDSS)
aka UC Report Center

EMPLID is required for access to prod UCPath data/reports.


N/A 

ePPN is primary user identifier. EMPLID is a secondary ID used to map user to UCPath-defined permissions.

To ensure user access to UCPath reports, EMPLID should be released as soon as possible after UCPath conversion/go live.

Because ePPN is the user's primary ID, you can release EMPLID at any time without impacting existing users. 

EMPLID is captured and added to the user's profile as part of any user login event. Therefore, it can be added to the SSO release at any time after production EMPLIDs are available and updates should be seamless.

Some locations/users already use UCDSS for non-UCPath reporting purposes (without EMPLID being released or required).


ALL
UC Decision Support QA (UCDSSQA) aka UC Report Center QA

Pre-UCPath go live, access is required, without EMPLID.

Post go-live, EMPLID is required. 

N/A

ePPN is primary user identifier. EMPLID is a secondary ID used to map user to UCPath-defined permissions.

Post-go live, EMPLID should be added to the list of SSO released attributes, as location testers will still need access for testing of UCPath reports after the location is live on UCPath.For pre-UCPath go-live testing, UCDSSQA application owners manually add report permissions to the user's profile.ALL
Effort Reporting System (ERS)Eventually, but not immediatelyPPS ID

ERS will only transition to EMPLID at the end of an effort reporting period, at which time they will reach out to locations.

At UCPath go live, users will continue to be identified with the existing PPS ID until the end of that reporting period. 


It's understood that some (new) users may get hired post UCPath go live, and end up needing access during a reporting period (but not having a PPS ID). ERS will work around this internally.

ERS will reach out to locations at the end of ERS reporting periods to coordinate the SSO changeover. (ERS reporting periods may vary between locations)

ALL
UCPath Production YesN/A (access requires EMPLID)

This transition is part of the go-live activities coordinated with UCPath.



ALL
UCPath "P-stack"YesN/A (access requires EMPLID)




ALL
i9 Complete/TrackerYesPPS ID or a Local account

EMPLID supercedes PPS ID as userID.

SSO change needs to be coordinated with UCOP Systemwide HR Compliance team (so HR can update the user Tracker profiles with EMPLIDs) concurrent with SSO change.




ALL
Job BuilderYesUCNetIDShould be seamless, no coordination required with the application owner to add EMPLID to the release. 

Job Builder matches SAML attributes to source data from UCPath/PPS, so adding EMPLID to the assertions will not break user access.


ANR UCB UCM UCOP UCSB UCSC UCSF

UC Outside Activity TrackerYes, but not immediately at UCPath go livePPS ID

???



UCPath D1 Cognos TrainingNoN/AN/A

UCPath D1 Cognos Training has been replaced by UCDSSQA for now. If the Cognos Training environment is re-deployed, we will follow up with locations at that time. 


None
Family Member Eligibility Verification (UnifyHR)YesPPS ID or a Local account

EMPLID supercedes PPS ID as userID.

SSO change needs to be coordinated with UCOP Systemwide HR Compliance team (so HR can update the user Unify profiles with EMPLIDs) concurrent with SSO change.


Not all locations are using SSO, app has the ability to manage local accounts for pre-UCPath locations.


ALL (except ANR)
Redwood RootsYesUCNetID

EMPLID supercedes UCNetID as userID. 

SSO change needs to be coordinated with application team (so app team can update the user profiles with EMPLID) concurrent with SSO change.




  • No labels