UMPASS Authentication Service is a central place where let users login the application securely. Users only need to remember one set of credential for accessing all support applications. Connected applications will use the login page that is provided by UMPASS Authentication Service to authenticate user. Currently there are two sets of servers, one of them supports Single Sign-on feature.

Single Sign-on

Single Sign-on (SSO) allow users to log in once to gain access to many web-based applications in same browser window. Users can move between applications securely and uninterrupted without specifying their credentials each time.

Server with SSO

The web address begins with https://websso.um.edu.mo and there is a “Single Sign On” wording highlighted with orange under “UMPASS Authentication Service”, looks like this:.

Server without SSO

The web address begins with https://websso1.um.edu.mo and looks like this:

Access

User will be automatically redirected to login page when accessing protected system.

Log in
Please use your UMPASS to log in.

Log out
To prevent others from accessing your personal information and visiting web sites by using your identity, always logout and close all browser windows after accessing services.

To let your web application authenticate by UMPASS, please contact Help Desk for further information. Please notes ICTO provides an authentication only, responsibility for determining user authorization remains to the application itself.

Steps:

1. Contact @ about integrating with UMPASS Authentication Service
2. Related colleagues will discuss with you about technical requirements, procedures and data that will be available for your application
3. Integrate with testing authentication server for development purpose
4. Perform security scanning and apply patch on your application
5. Connect with production authentication server

• Which applications are connected with UMPASS Authentication Service?
• How can I verify the authentication page is secure?
• UMPASS