Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 14 Next »

This page provides a step-by-step guide for signing in to a new OpenCCC Account.

Sections:

About the Sign In Process

What is an OpenCCC account and why do students need one?

OpenCCC is the California Community Colleges federated identity initiative, which includes a student account system that assigns each user a unique California Community Colleges ID number (CCCID) and allows access to systemwide web-based technology applications via one common single sign-on account.

 Read more about the Student Account & the CCCID

Student Account System & The CCCID

When an account is created by a user, a unique identifier is created for that user called the CCCID (California Community Colleges ID) and the user's personal identification data is stored in an Identity Center. The CCCID is the master link between the Identity Center, admission applications, and other system wide technology services. 

CCCID & Student Data Passed to Colleges

When a user is authenticated to use a systemwide service or application such as CCCApply or MyPath, the CCCID is passed to that service to identify the unique individual. In this way, services and applications can maintain personal accounts for the user anonymously, thus ensuring privacy for the user.

Why do users have to sign in to access CCC applications?

The user sign in process provides security and privacy protection - as well as important student education data tracking - for students across the California Community Colleges system. The student account that delivers single sign-on functionality allows users to maintain one set of sign in credentials for all systemwide technology applications throughout their CCC educational history.

Will users be able to sign in with their legacy account?

Yes! The new account system will include all existing (legacy) account information, including the user’s CCCID and application records. These legacy account holders will have to create a new password and complete the new two-factor identity verification process - as will all new users - plus one additional matching step to ensure the system matches the user to their original CCCID account.

Where do users go to sign in?

The process to sign in to systemwide technology applications has not changed. Students will encounter the Sign In page as they engage with CCC applications such as CCCApply, MyPath, Career Coach, and other secure services.

See more FAQs below: Resolving Common Sign In Issues

User Requirements

  • All users must have an OpenCCC account in order to access many CCC systemwide applications.

  • If a user doesn’t have an account, they will have easy access to the Create an Account process.

  • Users must have a unique email address or mobile phone number to create an account and verify their identity.

  • Users must choose a preferred method of contact (an email address or a mobile phone number) to receive a validation (security) code.

  • At least one of the user’s two methods must be validated in order to sign in and/or recover an account.

  • All users must create and confirm a password that meets security requirements.

  • All legacy users must reset their legacy password the first time they attempt to sign in.

For security purposes, two-factor validation is used to verify (authenticate) your identity. A time-sensitive security code is sent to the user to their preferred method of contact. The code must be retrieved and entered within 10 minutes of request to validate the user’s identity. Below is an example of the verification code message received by email.

Steps in the Sign In Process

Step 1: Sign In

All users will start on the Sign In page.

  1. Enter your email address or mobile phone number in the Email or Mobile phone input field.

  2. Click the Next button to validate your entry is unique.

User Sign In Credential Must Be Unique: Your email address or mobile phone number - whichever is preferred to sign in - must be unique to your account. Failed matches will prompt retry attempts or

Sign In Credential is Unique: The email address or mobile number entered is a validated unique match in the system. The user is prompted to the Password page.

Sign In Credential is NOT Validated: If the system can’t match the email or mobile number to a validated attribute in the system, the user is still prompted to the Password page.

Sign In Credential is NOT Unique: If the system finds more than one match to the email or mobile number in the system. The user is prompted to enter their legacy Username.

Sign In Credential is Not Found. If the system doesn’t recognize the credential entered, the user will still be taken to the Password page and prompted to enter their secure password. If the password entered is not recognized, the user is returned to the Sign In page to try again or click the Recover Account link.

Next: Follow the appropriate next step below.

After attempting to sign in with your email address or mobile phone number, what happens next depends on the result of that first matching validation.

If Your Email Address or Mobile Number IS Unique

If the email address or mobile phone number used to sign in matches a verified, unique account in the system, the Password page is displayed and the user is prompted to enter their secure password. This is known as the “happy path” experience and applies to the majority of users following their initial login to the new system.

If the user has forgotten their password, or if the password doesn’t match their legacy account, they will be prompted to create a new password using the Forgot Your Password? flow.

Steps:

After entering your unique and validated email or mobile number on the Sign In page:

  1. The Password page is display. Enter your secure password in the input field.

  2. Click “Sign In” to continue to your destination application.

The Password page prompts the user to enter their secure password or engage the Forgot your Password process.

If Your Email or Mobile Number is NOT Unique (Duplicate)

If the email address or mobile phone number used for sign in is not a unique match to an account found in the system, another user has already validated that specific attribute in the new system. The system will

While user sign in credentials must be unique to an individual, it is possible that an attribute (email or phone) was being shared with a family member in the legacy system.

Steps:

After entering your email or mobile number on the Sign In page:

  1. If the system identifies a duplicate email or mobile number, the Username page is displayed. Enter your legacy username to continue.

  2. If the system does not find a duplicate, but identifies that the email or mobile number has not been validated, the Password page is displayed. Enter your secure password to continue.

  • If an authenticated user is found to have a duplicate email or mobile number in the system and has not been validated, the UI should ask the user if they have another mobile number. If not, system should ask if they have an additional email address.

  • If user enters in a different email and/or phone, the system should query for status.

  • If not unique, the system should prompt them to contact helpdesk. 

  • If unique, the system should generate a code via the method they entered and prompt the user to validate account. 

  • Once a user successfully validates their account, the UI should advise the user that this method should be used for future sign in.

  • The system should check the users password to see if a password reset is required.

    • If password reset is not required, user should be auto logged in and proceed to where they need to go.

    • If a password reset is required, the user should be prompted to reset their password. If the password matches the new requirements, the system should save the new password in the database and the user should be auto logged in and proceed to where they need to go.

When this happens, the individual user who signs in and validates the attribute first will take ownership of that attribute and validate it. Any subsequent attempts to use that attribute by another user will get an error message and will be prompted to 1) use the other method; or 2) enter an alternate email or phone number that can be validated using the Verification process.

How will the user know that the credential used is not unique?
If the email address or mobile phone number entered is not unique, an error message displays like the one shown below.

Example Workflow:

  1. On the Sign In page: the user enters her email address.

  2. The validation service finds the email address is being associated with two or more accounts. Error message is displayed.

  3. User has several options:

    1. Change the preferred method of contact and enter a new unique attribute. (ex: select Use email instead or Use mobile phone instead.)

    2. Click on the Recover Account link to get help recovering your sign in credentials or password.

The message alert displayed for an error during the Sign In process.

If Your Email or Mobile Number is Not Validated

If Your Email or Mobile Number is Not Found

Step 2: Enter Your Secure Password

Users are required to enter a valid password in order to sign in.

Steps:

  1. In the Password input field, enter your secure password.

  2. Take a moment to save your password.

  3. Click the Sign In button to continue.

Forgot Your Password? If you forgot your password, or if the system can’t find your password, click the Forgot your password? link to validate a new one.

User Flow: Sign In Process

The user flow diagram shown below highlights the sign in “happy path” used most frequently by the majority of users.

Diagram of the User Sign In process for OpenCCC authentication.

Resolving Common Sign In Issues

Issue: The user doesn’t have an account.

Resolution: Click on the Create Account link on the Sign In page to establish an OpenCCC account.

 

Issue: The system doesn’t find a match to the Email address or Mobile Phone number entered.

Resolution: Confirm that the correct email address is being used and spelled correctly and try again. Or, click on the Recover Account link to verify your identity.

 

Issue: The Email address is not unique to the user.

Resolution: Click the Recover Account link to verify your identity and regain access to your account. Enter a unique email address on the Contact Information screen of the Edit Profile system and complete the validation process.

 

Issue: The attribute being used to sign in has not been validated yet.

Resolution: One of your two attributes is not validated during account creation. Therefore, return to the Sign In page and enter either your email address or mobile phone number, whichever was not initially rejected.

 

Issue: The user is trying to sign in with a landline phone number.

Resolution: The sign in process requires an attribute (email or mobile phone) that can be validated to confirm your identity. A unique email address or mobile phone number is required. Sign in with your unique email address to access the Edit Profile service. Edit the Primary Phone number entered with a mobile phone number then complete the validation process. Once validated, you’ll be able to sign in using your mobile phone or your email address in the future.

 

Issue: The user needs a new password.

Issue: The user needs to validate their unique sign in attribute, also known as their Preferred Method of Contact: email address or mobile phone number.

Issue: The user needs to update or remove their contact information.

Issue: The user needs to update or remove their personal information.

Issue: The user wants their account deleted from the OpenCCC system.

Have a different issue? If you’re encountering an issue that isn’t listed here, please contact a CCCTC Support Representative for assistance.

  • No labels