| Info |
|---|
CCC Data Warehouse Report Server v7.8 Last Update: June 2022 |
...
TheReport Server User Account
The new Report Server User Account that uses Keycloak directly (CO/CVC/Superadmins)is designed with two-factor authentication (2FA) to secure and protect our college and systemwide student data. Two-Factor Authentication is a security system that authenticates a user’s identify identity by requiring two or more pieces of evidence (credentials + verification code) before granting access to a service or system. School and District users will use the school’s IDP to log in. The school’s login may include 2FA, but this 2FA is not managed by the CCCTC.
| Note |
|---|
IMPORTANT: Beginning with the production launch of DW Report Server (CCC Data v.2.1), all new and existing authorized DW Report Server users are required to set up new user accounts with two-factor authorization in order to gain access to data through the DW Report Server. All previous accounts have been de-provisioned and removed. For more information, please contact your Enabling Services College Relationship Manager (CRM) or contact Support Services. |
...
User Types & Access Levels
Authorized access correspond corresponds directly to the user’s college or district 3-digit MIS Code, as shown in the table below.
...
The account creation and user setup process is a two-part workflow between a CCCTC system Administrator and the authorized user. Below is a breakdown of the two-part setup process for the Administrator and the UserThere are two user types and each has its own process for setting up the user in Keycloak. Once the user is set up in Keycloak and the user authenticates via either a Keycloak log-in page (branded with CCTC logos) or via the IDP’s log-in page (branded for the individual school or district). Below is a breakdown of each of the two ways of setting up a user.
The Administrator account creation process is summarized as follows:
The authorized CCC Tech Center Administrator logs in to Manage > Users Keycloak and adds new user account to the user’s Organization (MIS Code)The with the appropriate “mis” attribute, collegeCodes attribute (for schools and districts), and the appropriate roles.
If the user is a native Keycloak user (CO/CVC/Superadmin) the Administrator securely transmits the account credentials and password to the User’s institution email (.edu) using Privnote.
...
If the user is using a school or district IDP, the user’s credentials will be set at the school/district and the user should either know the credentials or contact the school’s IT department to change/update the user’s credentials.
The Keycloak User (CO/CVC/Superadmins) authentication setup and first-time login process is summarized as follows:
The User engages with the Enabling Services implementation team and receives account credentials and user setup information
The User installs a compatible authentication app on their desktop or mobile deviceThe User completes the “first-time login” process (the one-time scan of the QR code with authenticator app happens and captures Verification code required for login)
The User completes the “first-time login” process (the one-time scan of the QR code with the authenticator app happens and captures the verification code required for login)
The User is automatically authenticated and authorized to login to the DW Report Server.
The IDP User (Schools and Districts) authentication setup and first-time login process are summarized as follows:
The User engages with the Enabling Services implementation team and receives acknowledgment that the user has been created with the appropriate roles and attributes
The User goes to the appropriate link for their IDP and logs in
The User is automatically authenticated and authorized to login log in to the DW Report Server.
Receiving Your Secure Login Credentials (CO/CVC/Superadmin)
For security purposes, the User will receive their account credentials and password (for CO/CVC/Superadmins) from the CCCTC Administrator in one or two separate emails to their institution email address (.edu).
The User will receive:
All Users: An email containing the user’s account credentials and URL to the Data Warehouse Report Server, andfor CO/CVC/Superadmin or the correct URL for log in to the IDP.
CO/CVC/Superadmin users only: An email with a link to Privnote containing the user’s unique password.
| Note |
|---|
Note: The unique password will not be passed to the authorized user until they have commenced the implementation process with the CCCTC Enabling Services team for added security. |
Implementing the Authentication Software (CO/CVC/Superadmin)
Before the Keycloak nativeuser (CO/CVC/Superadmin)can log in to the Report Server for the first time, they must have a compatible authentication app installed that implements Time-based One-Time Password TOTP functionality such as Google Authenticator, Chrome Authenticator, or Authy(which you could download to a phone or computer). There are many free, user-friendly Authenticator apps available at no cost that can be downloaded and installed quickly and easily onto your desktop and/or mobile device.
...
Authenticator for Mac and Windows Chrome browsers is available free from the Chrome Web Store. This app installs very quickly to your desktop (recommended) as well as your phone, and includes a lot of great features that promote security and usability. NOTE: The entire download and install process takes less than one minute. You may need local IT authorization and assistance to install it if policy requires this.
To Install the Chrome Authenticator:
...
The First-Time User LogIn Process
The first time a new Keycloak nativeuser (CO/CVC/Superadmin) logs into the Data Warehouse Report Server they need to establish the connection between their account credentials, a shared secret key (QR Code) and the authentication softwarein order enable the multi-factor login authentication. This is a one time process that is completed in the steps below.
...
Ensure you have one of the compatible authenticator apps installed on your desktop or mobile device.
Navigate to theData Warehouse Report Server URL(http://dw-reports.ccctechcenter.org/) and land on the Log In page.
Enter the account credentials provided to you into the following fields:
...
:
...
User ID: Enter your institutional email address in the User ID field (.edu or .org is required).
Password: Enter the unique password provided to you by the Administrator (sent separately via Privnote). This password is generated by the system Administrator during the account creation process. This unique password cannot be changed or reset by the user.
...
To run a report, click the name of a report in the repository. For example, click DW LGBTQ Report. The report appears in the Report Viewer.
...
On the Home page, click Create in the Reports block. The Create Report wizard opens.
Select the Ad Hoc view you want to use as the basis for your report.
Select a report template. To use a template other than the default, select Custom Report Template, click Browse and select the desired template. See Report Templates for more information.
Click OK. If asked, enter the input controls needed. See Using Input Controls.
You can now begin working with your report.
...
| Info |
|---|
Creating Filters with Relative DatesYou can filter information in your view based on a date range relative to the current system date. You can accomplish this using date-based filters, and entering a text expression describing the relative date or date span you want to display, using the format <Keyword>+/-<Number> where:
For example, if you want to see all of the CC Promise Grant Applications submitted during the prior week, your expression would be: WEEK-1. |
...