- Get help
- Announcements & alerts
- Service outages
- Security alerts
- Major initiatives
- Information security
- Anti-Spam (CASL) Compliance
- Data security standard
- Desktop Security
- Identity Protection
- Phishing Scams
- Remote work
- Security hygiene
- Tips for safe computing
- Travelling with technology
- Keeping Your Personal Information Safe During the Holidays
- October is Cyber Security Awareness Month
Vision, strategy and policy
- One I.S. vision
- Cloud Computing Strategy
- Stewardship Model
- Stewardship Committees
- Stewardship Workflow
- Connecting to University Governance
- Approval and Prioritization
- Stewardship and Project Management
- Terms of Reference: One I.S. Stewardship Committee
- Administrative Systems Stewardship Committee
- Terms of Reference: Research Systems Stewardship Committee
- Terms of Reference: Educational Systems Stewardship Committee
- Mobile Strategy
- Reports and blog
- Vision, strategy and policy
What is a shared sponsored account?
A shared sponsored account is a sponsored account that is used by one or more individuals, and it is possible that the password or access to the account is shared with or transferred to other individuals (e.g., departmental roles, clubs/associations, and test accounts).
To enhance security and minimize the risk of unauthorized access for shared sponsored accounts, IT Services has introduced the Delegated Access Management app and delegate login. These allows multiple users to log into same account using their own SFU credentials on CAS-protected web applications.
What are the types of roles on DAM?
There are 3 types of roles on DAM:
- Sponsor: Person or role who is responsible for the account life cycle (request, activation, renewal, deactivation, etc. and associated payment). The primary holder of the account's password.
- Manager: Person or role who is responsible for managing delegated access to the account (i.e., on/offboarding), and may need to access the account for day-to-day work. Each sponsored account can have more than one manager.
- Delegate: Person or role who needs to access the account for day-to-day work. Each sponsored account can have more than one delegate.
What is delegated access or delegate login?
By having delegated access to a sponsored account, you can now access that account (e.g., SFU Mail via web browser) using your own SFU account credentials. This type of login is referred to as delegate login – i.e., logging into a different account using your own credentials.
Note: Delegate login is currently only available to web-based CAS protected services (e.g., SFU Mail via web browser).
I am a manager for a sponsored account, what does that mean?
A manager is responsible for managing delegated access to the account (i.e., on/offboarding), and may need to access the account for day-to-day work. Each sponsored account can have more than one manager.
If you are assigned as a manager for a sponsored account, you may add/remove delegates or other managers for that account on the Delegate Account Management (DAM) app at https://dam.sfu.ca.
I've added delegates to my sponsored account, how does delegate login work for my delegates?
Once you have given delegated access to another individual, they will receive a welcome email with login instructions. You can also direct them to the how-to page on delegate login for sponsored account for more details.
I am a delegate for one or more sponsored account(s), is there a list that shows all the accounts I have delegate access to?
To view a list of delegated sponsored accounts you have access to, follow these steps:
- Open any web-based CAS protected services (e.g., SFU Mail via web browser)
- Log in using your own SFU account credentials with the format below:
Ensure you have a colon in front and replace yourcomputingID with your SFU Computing ID (e.g., :kipling).
|Password:||The password for your SFU computing ID|
|MFA:||The MFA code associated with your account|
Troubleshooting and Technical FAQ
Why am I not seeing my sponsored account on DAM?
You must be the sponsor of the sponsored account for your sponsored account to appear on DAM. If you are the current sponsor, and your account is not showing on DAM, the sponsored account information may be out of date. Contact the IT Service Desk or visit SFU SAM to update your sponsored account information.
Alternatively, the sponsor can add you as a manager of the sponsored account which will allow you to see the sponsored account on DAM for you to manage delegate access.
I see personal sponsored accounts on DAM, should I enable delegate access on those accounts?
In most cases, you don't need to enable delegate access on those accounts. Enabling delegate access provides additional login methods to the sponsored account which is typically useful for sharing sponsored accounts.
I am not the primary user of the sponsored account, just a sponsor. Do I need to enable delegate login?
We recommend talking to the primary user of the sponsored account. For cases where the sponsored account needs to be shared to others or transferred to other users at a relatively fast rate, you may need to enable delegate access and provide manager role on DAM to the primary user for them to manage account access.
In other cases where the sponsored account does not need to be shared or transferred, enabling delegate access may be unnecessary.
Does enabling delegate access restrict normal login methods?
No, enabling delegate access means enabling an additional login method to the sponsored account on web-based CAS protected services. All existing logins and the normal method of logging into the sponsored account remain the same.
What services does delegate login support?
Delegate login is only supported on web-based CAS-protected services that allow sponsored accounts to login. Services that don't allow sponsored accounts, such as FINS and myINFO, cannot use delegate login.
I have questions or feedback regarding DAM, who do I contact?
If you have need help or have any question or feedback regarding DAM, please contact the IT Service Desk.