Page Comparison

...

See Information Required to Create an OpenCCC Account

Key Functionality:

• A CCCID is generated when a student user creates an OpenCCC account.

• Each CCCID is unique to the individual student.

• The CCCID is used to identify the student during sign on by systemwide technology applications.

• The CCCID is stored in a secure, systemwide identity management system and delivered to the college via SuperGlue for Apply or via Data Warehouse Direct Connect service.

• The CCCID can be used for student identification and deduplication by the college.

...

These are the only data required to create a new OpenCCC account. Additional information may be needed to submit an application for admission or a financial aid application. 

How do colleges get the CCCID?

...

No. The number of duplicates CCCID account across the entire system is approximately .2% and decreasing. Though some colleges have raised concerns about the potential for duplicates, at this time we are finding that very few duplicates are being reported (less than 100 duplicates at most colleges, and in even more cases - less than that). The CCC Technology Center recommends that colleges use the account that aligns to the most recently submitted CCCApply application when associating duplicates to student college accounts.

For the OpenCCC Accounts that are created via the SSO Proxy, how do the colleges get these accounts back into their systems?

The

...

significance of CCCID for

...

Single Sign-On (SSO)

The CCCID is used for multiple purposes across the California Community Colleges system. The CCC Chancellor's Office and other systemwide organizations rely on the CCCID to track progress and the educational choices made by student across the course of their academic journey. Students that attend multiple colleges across the system are tracked in one central location (OpenCCC Student Account System) and their CCCID will be used for research (locally and systemwide) to better align support and services across the system.

In order to track students through their CCCID, the objective of the SSO Proxy is to ensure that every CCC student has a CCCID. Therefore, as part of the SSO Proxy integration, it is strongly recommended that colleges store the CCCID in their Active Directory or LDAP directory in order to pass this attribute with the EPPN with the student user session when authenticating to a CCC web application, such as CCCAssess, Canvas and MyPath.

What is the EPPN?  

The EduPersonPrincipalName (EPPN) is the unique identifier for a user (applicant, student, faculty, staff) across all college IdPs.

For the the Student population, a Central OpenCCC Id (CCCID) is a unique correlation ID  for a single student across the entire CCC system and is a key SAML attribute requirement across all service providers.  Many colleges will be able to lookup the CCCID from their directory servers, but for the colleges that dont store CCCID, the central IdP proxy will be used to lookup the CCCID for a given EPPN and included it in the list of SAML attributes sent to the final Service Provider.   

The EPPN has the syntax of an email address, but it should be considered a "globally unique federated identifier" rather than an email address. It is generally the most important attribute to be shared with federated services. Note that the value of EPPN does not have to match what the user fills in as their username when they login, and the user does not need to know what their EPPN is, as it is shared between the IdP and the service. It should be unique, rarely change, and not be reassigned to another user.  

...

The significance of EPPN to the CCC SSO Federation

The EduPersonPrincipalName (EPPN) is the unique identifier for a user for across all college IDPs.

...