Frequently Asked Questions about NetID

Your Colorado State University System NetID provides a simplified and secure form of authentication and authorization across multiple university electronic systems and services.

Show All

NetID

What is a NetID?

Your NetID is a Colorado State University System network identity that replaces CSU-Pueblo eAccounts and CSU Fort Collins eIDs.

Who needs an active NetID?

A NetID is assigned to all applicants, students, faculty, staff and associates at CSU-Pueblo, and CSU Fort Collins starting after the NetID migration (expected in 2023), when existing active eIDs automatically become active NetIDs.

An active NetID and password is required for login to Microsoft 365 email and many other systems at CSU.

What is the format of a NetID?

CSU Fort Collins

If you joined CSU after July 24, 2023, your NetID follows the new standard format:

  • C followed by your 9-digit CSU ID
  • Automatically generated
  • Example: C899456789

If you were associated with CSU Fort Collins prior to July 24, 2023 and your account was active in 2022 or later, your eName/eID automatically became your NetID:

  • 2 to 8 lowercase characters starting with a letter
  • Created by the user
  • Example: xgarcia

If your account was not active in 2022 or 2023 but you reestablished your affiliation with CSU, your eName/eID would have been expired and you would be issued a new NetID in the C# format.

CSU-Pueblo

  • C followed by your 9-digit CSU ID
  • Example: C899456789

What is my CSU ID?

Your CSU ID is a 9-digit number that begins with an 8.

It is a unique identifier for everyone at CSU-Pueblo and CSU Fort Collins within the university systems.

How do I obtain or find my CSU ID or NetID?

CSU Fort Collins

If you don't know your CSU ID or NetID,

  • Applicants: Contact the Office of Admissions at (970) 491-6909.
  • Current Students: Contact the Office of the Registrar at (970) 491-4860.
  • Faculty, Staff and Associates: Contact your department's Human Resource representative.

CSU-Pueblo

You can view your CSU ID and NetID in Personal Access to Web Services (PAWS):

If you don't know your CSU ID or NetID,

  • Applicants: Contact the Admissions Office at (719) 549-2462.
  • Current Students: Contact the Registrar's Office at (719) 549-2261.
  • Faculty, Staff and Associates: Contact your department's Human Resource representative.

Can I change my NetID?

Due to the many CSU and federated systems that use your NetID as a unique identifier for single sign-on, we are unable to change eIDs (eNames) to the new NetID format.

How can a department obtain a NetID for someone else (Associates)?

To provide network access to associates of Colorado State University, a department's Human Resources representative must create the new hire or concurrent assignment. The associate can then register for a NetID the day after the assignment has been fully approved.

For more information, see Associates section on the HR website.

What policies apply to the use of my NetID?

CSU System Policies are applicable to members of all institutions within the CSU System. These include:

  • Acceptable Use Policy: Explains permitted and prohibited uses of CSU System information technology resources, including computing and data systems, equipment, and services.
  • FERPA Policy: Describes student rights and responsibilities regarding the privacy of their education records.

Additionally, individual institutions may have their own specific policies related to information technology:

CSU Fort Collins policies on Information Technology:

CSU-Pueblo policies on Information Technology Services:

Where can I learn more about NetID?

Activation and Expiration

How do I activate my NetID?

To activate your NetID, follow these steps.

  1. Select Activate from the top menu.
    1. Enter your NetID.
    2. Enter your activation email address. This is usually the non-CSU email address you used during the admission or employment application process. If you're unsure, contact the Admissions or Human Resources office.
    3. Check the box next to "I'm not a robot".
    4. Click Send. An activation email for your NetID will be sent to the email address you provided.
    Screenshot of Account Activation: Enter activation email address and NetID
  2. Log in to your non-CSU activation email account.
    1. Open the email from NetID@colostate.edu with subject line NetID Account Activation Request.
    2. Click the link in the message, which starts with https://netid.colostate.edu/token.aspx?token= .
    Screenshot of Account Activation: Click link in email message
  3. A new browser window or tab should open.
    1. Re-enter your NetID and click Continue.
    2. Enter your preferred first name.
    3. Select your Preferred Email Address.
      1. Choose a first name for your CSU email alias from the provided options. If your preference is not listed, select Other and enter your choice.
      2. Select a last name for your CSU email alias if your preferred last name is different from your legal last name.
      3. Select your preferred email domain (colostate.edu for Fort Collins or csupueblo.edu for CSU-Pueblo) if you are associated with more than one CSU campus.
    4. Enter a non-CSU email address to use for password recovery. This defaults to your non-CSU activation email.
    5. Create and confirm a NetID password.
    6. Review the CSU System Acceptable Use Policy and check the box.
    7. Click Activate. Your NetID will be activated, and a confirmation email will be sent to your activation email address.
    Screenshot of Account Activation: Enter preferred first name, email address, and password

Am I eligible to activate my NetID?

To activate your NetID, you need to be a CSU applicant, admitted student, or recently hird faculty or staff member with a new NetID, or you have returned to CSU after your NetID expired.

Your NetID needs to be in the "Awaiting Activation" life cycle state; it must not be already active, expiring or expired.

After I activate my NetID, how soon can I access my other accounts?

Note: These services take time to activate before you can access them:

  • Microsoft 365 (Outlook for email and calendar, and other services) - up to 2 hours
  • CSU-Pueblo Active Directory (for NetID login) - up to 2 hours
  • Banner, Canvas, Blackboard, other external services - up to 24 hours

Who should I contact for help with NetID activation?

See the Contacts page for contact details.

CSU Fort Collins

  • Student applicants and returning students should contact Admissions.
  • Admitted students should contact the Registrar.
  • Alumni and former students who need to access their personal records should use RAMrecords.
  • Faculty, staff and associates should contact the Human Resources representative for their department.

What are the NetID account life cycle states and what systems can I access in each state?

Life Cycle State Email Access Description and Access
Awaiting Activation No You are eligible to activate your NetID and email account.
Active Account Yes You have activated your NetID account.
You have access to CSU email and other systems based on your campus and affiliation(s) (student, faculty, staff, associate).
Expiration Cycle Yes You are no longer affiliated with CSU as a student, employee or associate. You can still access your CSU email but no longer have access to most other CSU systems.
Expired Account No After your CSU affiliation ends, you must reestablish an affiliation to access email or other CSU systems.

When do my NetID, email and other CSU accounts accounts expire?

The expiration of NetID accounts depends on your affiliation with the University. The following rules apply:

  • Applicants: NetID expires 45 days after the application period.
  • Students: NetID expires 365 days after the student's last class.
  • CSU Fort Collins Faculty/Staff: NetID expires 30 days after the end of University affiliation (employee's separation from the University or the Appointment End Date, if applicable).
  • CSU-Pueblo Faculty/Staff: NetID expires 365 days after the end of University affiliation.
  • Post-Doctoral fellows, interns, residents and sponsored researchers: NetID expires 30 days after the end of University affiliation.
  • Associates: NetID expires 30 days after the appointment ends.
  • Retirees: Retirees and Emeritus professors retain their NetID for life.

When your NetID account expires, you will lose access to all CSU accounts, including email, cloud drives and other office applications (Microsoft 365 and Google Workspace for Education).

How can I reestablish eligibility for a NetID?

You can reestablish your eligibility for a NetID in one of the following ways:

  • Register for a credit course.
  • Become a full-time or part-time employee.
  • Become an associate. (Contact the department with which you have a working relationship.)

Please contact the appropriate office (Admissions, the Registrar, CSU Online, or the Human Resources liaison of your department). They can check their systems and make any necessary updates if you have already reestablished your eligibility but the NetID system is not yet recognizing it.

During the period after I leave CSU but before my account expires, what systems will I still be able to access?

If your account is in the Expiration Cycle state, you will still be able to log in to the following systems:

  • The NetID website
  • Email, cloud drives and other office applications (Microsoft 365 and Google Workspace for Education)
  • Some other applications that require NetID login but do not require an active affiliation.
    • Access to many CSU web applications is based on your campus and affiliations (student, faculty, staff and/or associate).
    • When your affiliation changes or your association with the University is terminated, your access will also change or be removed.

When I leave CSU, how should I prepare for the expiration and removal of my NetID, email and other CSU accounts?

Inform other people and accounts of your email change.

  • Automatically forward your emails to your new email address. See instructions for Microsoft Outlook or Gmail.
  • Set an automatic reply to inform others of your new email address. See instructions for Microsoft Outlook or Gmail.
  • (Forwarding and automatic replies will end when your account expires.)
  • Change your social media and commercial accounts to use a non-CSU email address for second factor login and account recovery.

Transfer information you want to keep.

  • Download or transfer to other systems any existing CSU content you want to keep, such as email messages, drive files, and contacts. See instructions for Microsoft 365 or Google.
  • Note that files and folders in your OneDrive folder that are currently being synced with your CSU OneDrive account will no longer be available when your NetID expires, so they should be moved outside of your OneDrive folder. Also see Transfer files to your personal OneDrive with the Mover Transfer Wizard.
  • For transferring OneNote, see Export and import OneNote notebooks.
  • Log in to your downloaded Microsoft applications (Outlook, Word, Excel, etc.) with a non-CSU Microsoft 365 account.

Create accounts for former students.

What email notifications are sent about my NetID, and how can I know if they are legitimate?

Email notifications of password and account changes and expiration will be sent to both your CSU First.Last email address and your non-CSU recovery email address.

You will be notified whenever these changes are made to your NetID, to alert you in case you did not make the change:

  • NetID activation
  • Password
  • CSU first.last email address
  • Non-CSU recovery email address
  • Preferred first name
  • Duo two-factor authentication activation and devices

You will also be notified when your NetID password or account is scheduled to expire:

  • The first reminder email is sent 30 days before the expiration date. Reminders continue weekly until the expiration date.
  • Password expiration notifications include your password expiration date and instructions for changing your password.
  • Account expiration notifications include information on keeping your account active or preparing for your NetID and CSU accounts to expire.

How to check that the email is legitimate and not a phishing attack:

  • The email will come from the NetID@colostate.edu email address.
  • The message will address you by full name and include your NetID.
  • Links will go to valid CSU sites like netid.colostate.edu, it.colostate.edu and www.csupueblo.edu.
    • Hover over links to preview destinations.
    • You can also type netid.colostate.edu or it.colostate.edu into the address bar of your browser rather than clicking a link.
  • Select View/Update > Show My Information and check the NetID Account section to confirm your password and account expiration dates.

If you are unsure if an email is legitimate, or suspect your account was compromised, see cybersecurity contacts, awareness and training.

If your account has been compromised and we detect that your account is sending phishing emails, your NetID password will be reset to a random value, your recovery emails will be removed, and you will be contacted by CSU IT incident response. We will not ask you for your old password.

Password

How can I change my password?

To change your password if your current password is working, select View/Update > Change Password.

If your account is still active but your password has expired or you have forgotten your password, you can recover it by selecting View/Update > Recover Password.

Password Requirements

  • Your password must have 15 to 30 characters.
  • Only use these characters: letters (a-z and A-Z), numbers (0-9), and the following special characters: ! % + - . : ? [ ] ^ _ ` { | } ~
  • Do not include any of these special characters: blank_space @ $ & " ( ) ' ; = # * < > , / \
  • Do not include your CSU ID, legal first name, or legal last name in your password.
  • Do not use just one word in a dictionary of any language, even if it meets the length requirement.
  • Do not reuse a password that you have previously used for this account.
  • Do not repeat a character 5 or more times consecutively (e.g., "aaaaabbbbbccccc").
  • You must change your password at least every 12 months.

Password Guidelines

  • Remember that your password is case-sensitive. Ensure that the Caps Lock key is not activated.
  • Choose a unique password. Use a different password on all work and personal accounts.
    • Use a password manager to help you create and manage unique, long passwords for many different websites.
  • Choose a password that is hard for people and bots to guess.
    • Avoid using personal information that can be easily accessed or guessed.
    • Avoid using common phrases and book, movie, and game titles.
    • Avoid using repeated words or sequences (e.g., "12345asdfg12345asdfg").
  • Select a password that is easy for you to remember.
    • Consider using a unique passphrase of words that hold personal meaning to you (e.g., "DryNymphGnatTrout" or "dry-nymph-gnat-trout")

What other steps should I take to secure my CSU NetID and other accounts?

How long does it take for a password creation or change to reach other systems?

The process of creating or changing a password may take up to 15 minutes to propagate across all systems.

How often do I need to change my NetID password? When will my password expire?

The CSU IT Security policy requires all NetID account holders to change their password once per year. Your password will expire one year after it was created or last changed.

The expiration date of your password is listed on these two pages:

What is a password recovery email address and what email address should I use?

  • Your account recovery email address is used to verify your identity and reset your password if you forget your password or CSU ID.
  • It is required and must be a personal, permanent, non-CSU email address. (It cannot end with colostate.edu or csupueblo.edu.)
  • You should not use an email address that will be expiring soon, such as your email address from your high school or previous college or university.
  • You can have a maximum of 2 recovery emails. (To add a new one when you have two, you must delete an old one.)

How can I recover my password if it expires or if I forgot what it was?

To recover your password, follow these steps:

  1. Select View/Update > Recover Password from the top menu.
  2. Enter your NetID and provide your non-CSU recovery email address. Screenshot of Password Recovery: Enter NetID and recovery email address
  3. Check the box next to "I'm not a robot" and click Send.
    An email will be sent to your non-CSU recovery email address. Screenshot of Password Recovery: Email is sent to your recovery address
  4. Log in to your non-CSU recovery email account.
  5. Open the email message from NetID@colostate.edu with the subject line NetID Account Recovery Request.
  6. Click the link in the message, which starts with https://netid.colostate.edu/token.aspx?token=. Screenshot of Password Recovery: Click link in email message
  7. A new browser window or tab should open. Enter your NetID and click Continue. Screenshot of Password Recovery: Enter NetID
  8. Authenticate with Duo if prompted. Screenshot of Password Recovery: Authenticate with Duo
  9. Review the password requirements, and enter and confirm your new password. Screenshot of Password Recovery: Enter and confirm new password
  10. Click Save. Once you have successfully saved your new password, your account will be updated, and you should be able to access your account using the new password.

Who should I contact for help with NetID password recovery?

See the Contacts page for contact details.

CSU Fort Collins

  • Student applicants and returning students should contact Admissions.
  • Admitted students and former students who left CSU less than 12 months ago should contact the Registrar.
  • Alumni and former students who need to access their personal records should use RAMrecords.
  • Faculty, staff and associates should contact the Human Resources representative for their department.

Two-Factor Authentication with Duo Mobile

What is Two-Factor Authentication?

Two-factor authentication makes your account more secure by requiring an additional piece of information beyond your username and password.

When you log in to some CSU systems, you will be required to validate your login credentials using a device you possess.

Ways to Authenticate with Duo Mobile (Devices)

  • Use the Duo Mobile app on your smartphone or tablet (recommended).
  • Receive a call from a phone you registered.
  • Generate a six-digit key from a hardware token.
  • Use a YubiKey security key.

What systems at CSU require Two-Factor Authentication?

When must I set up Two-Factor Authentication?

You should set up two-factor authentication as soon as you have activated your NetID.

All CSU students, faculty, staff and associates must set up two-factor authentication for Microsoft 365 access.

What operating systems support the Duo Mobile App?

Effective February 9, 2023, the Duo Mobile app will no longer support Android 8, Android 9, and iOS 13. Users will continue to be able to authenticate. However, no support or troubleshooting will be available if issues are encountered. We recommended users upgrade to the latest iOS or Android version.

For more information, see Duo Mobile App OS Support Changes

How do I set up Two-Factor Authentication with Duo Mobile? (for first-time users)

  1. Download and install the Duo Mobile app from Duo Security LLC:
  2. Log in to the NetID website. Click Login, select your campus, and enter your NetID and password. Screenshot of NetID login
  3. Select Two-Factor Authentication (Duo) from the View/Update menu. Screenshot of Duo menu item
  4. Click the Enable Two-Factor Authentication button to enable two-factor authentication on your NetID account. Screenshot of Duo
  5. Register and activate at least one device, preferably two.
    1. Click the + Register Device button. Screenshot of + Register Device button
    2. You should see the Register Device screen. Screenshot of Register Device screen
    3. Device Name: Enter a description that will help you recognize the device, such as cellphone, tablet, office phone, or my Samsung Galaxy S21.
    4. Phone Number: Enter the 10-digit phone number of the device, or leave blank for a tablet.
    5. Type: Select the type of authentication you would like to use. DUO Mobile App is recommended. For a land line, you must use phone call. Screenshot of Type Menu
    6. Platform: Select the operating system of your device (such as Apple iOS, Google Android, or Windows Phone).
      If you are not using the Duo Mobile app, select Generic Phone or Landline. Screenshot of Platform Menu
    7. Click Save. If you are using the Duo Mobile app, you will see the Two-Factor Device Activation screen with a QR code. Screenshot of Duo Device Activation
    Then on your device,
    1. Open the Duo Mobile app.
    2. Select Set Up Account, or the  or  Add icon in the top right if you already have a Duo authentication with another entity. Screenshot of Duo Accounts Add
    3. Select Use QR Code in your device. Screenshot of Duo Use QR Code
    4. Use your device to scan the QR code on the web page. Your device will be automatically connected with the NetID application. Screenshot of Duo Adding Account
    5. On the Name Account screen, modify the Account name if desired, and tap Save. Screenshot of Name Account
    6. On the web page, click the Return link. Your device will appear at the bottom of the list of registered devices. Screenshot of Registered Devices
  6. Register a second device.
    • You are encouraged to have a second device registered at all times, to prevent being locked out of your account in case your primary device is lost or unusable.

How do I use Duo Mobile authentication after I have registered a device?

  1. Click Log Out if you are logged in.
  2. Click Login, select your campus, and log in again with your NetID if prompted.
  3. You will be prompted for two-factor authentication with Duo. Screenshot of Duo Push
  4. On your device, look for a login request from Colorado State University with text "Are you logging in to Web SDK - NetID?". Screenshot of Approval
  5. Tap Approve. You will then see the Approved screen and will be logged in to the NetID website. Screenshot of Approved

How do I register a YubiKey security key for use with Duo at CSU?

Purchase a YubiKey.

  • YubiKeys are available online from the Yubico store, Amazon, Walmart, etc.

Enable your YubiKey.

  1. Log in to the NetID website.
  2. On the Duo prompt screen, cancel the default login option if necessary, and click the Other options link.
    Screenshot of Duo Login canceled
  3. On the Other options to log in screen, click the Manage devices option below your existing devices.
    Screenshot of Duo Other options to log in
  4. If prompted with a Verify your identity before managing devices screen, select an existing device (such as Duo Push if you registered your mobile device) and complete Duo authentication. Screenshot of Duo Verify your identity before managing devices
  5. From the device management portal, select Add a device to the right of your existing devices. Screenshot of Duo device management portal
  6. From the Select an option pop-up window, select Security key. Screenshot of Duo device select an option
  7. When a pop-up window is displayed, tap on the metal circle of the security key to enable it.

Set your YubiKey as the default device.

  1. When prompted to log in, select your security key. (Whatever device you select to log in after managing devices becomes the default device.)

Log in with your YubiKey.

  1. Log in to the NetID website.
  2. If necessary, cancel the default login option, click Other options, and select Security key.
  3. Click Use Security Key.
  4. You will see the Use Security Key pop-up window.
    Screenshot of Duo use security key
  5. Touch the blinking light on your YubiKey to authenticate.

Note that YubiKeys currently do not work with GlobalProtect unless you are using Linux and use the System Default Browser.

YubiKeys and hardware tokens must both be added from the Duo prompt (and not the Two Factor Authentication page).

How do I get and use a hardware token for Duo authentication at CSU?

  1. CSU Fort Collins: Buy a Duo D100 hardware token at RAMtech in the Lory Student Center for $23.75 and the staff will register the token for you.
  2. CSU-Pueblo: Hardware tokens are not currently supported.
  3. Log in to the NetID website.
  4. On the Duo prompt screen, cancel the default login option if necessary, click Other options, and select Hardware token. Screenshot of Duo Other options to log in
  5. Press the button on your hardware token to generate a new passcode, type it into the Passcode field, and click the Verify button. Screenshot of Duo passcode

What should I do about this error message when adding a phone number? "This phone number is already being used."

If your phone is already in the Registered Devices list, you do not need to add it again.

If you have created a Duo account with both your CSU eID and CSU System NetID, and both accounts use the same phone number, choose one of these workarounds:

  • If you have not registered any other devices, log out and log in again, and follow the instructions for registering a device if none are registered.
  • If you will only be logging in with this device using Duo "Send Me a Push" and not a phone call, you can leave the phone number blank.
  • If you must include a phone number, you could enter an arbitrary number in the optional Extension field.
    (An extension is one or more extra digits normally used to connect to an internal phone of a business or organization.
    A fake extension, such as 99, would be ignored by most phones, and the combination of phone number plus extension would be unique for Duo purposes.) Screenshot of fake extension 99
  • If you are no longer using the device for Duo login with CSU NetID, remove the device from the Two-Factor Authentication (Duo) page.

How can I change my default Duo device if I have more than one?

  1. Log in to the NetID website.
  2. On the Duo prompt screen, click the Other options link at the bottom. (You may have to cancel the default login option if you don't see the link.)
    Screenshot of Duo Push
  3. Select your preferred login method. (Whatever device you select to log in after managing devices becomes the default device for future logins.) Screenshot of Duo Other options to log in

What should I do if I can't use any of my registered devices for Duo login?

Contact us so that a Duo administrator can remove all your registered devices and you can start over.

Where can I learn more about Duo Two-Factor Authentication and the GlobalProtect VPN at CSU?

Email

What is my email alias and what are the formatting requirements?

Your email alias is your public CSU email address, which is created when your CSU email account is set up.

The formatting requirements for your email alias are as follows:

  • It includes your first and last name.
  • Your first name can be your legal first name, preferred first name (nickname), or any other name like your middle name, First.Middle, or First.MiddleInitial.
  • Your last name can be your legal or professional/preferred last name.
  • The allowed characters in the email alias are: A-Z, a-z, underscore (_), hyphen (-), and period (.)

The most common formats for email aliases are:

  • First.Last@colostate.edu (for CSU Fort Collins staff and students)
  • First.Last@rams.colostate.edu (for CSU Fort Collins students before 2018 - Gmail)
  • first.last@csupueblo.edu (for CSU-Pueblo staff and students starting from May 2022)
  • fm.last@pack.csupueblo.edu (for CSU-Pueblo students before May 2022)

How can I view and change my email alias after my NetID is activated?

To view and change your email alias after activating your NetID, follow these steps:

  1. Select View/Update > Email Alias.
  2. Choose your CSU Email First Name from the menu. Your options will include your legal and preferred first name, middle name, and/or initials. If your preference is not listed, select Other (please specify) and enter a different name.
  3. Choose your CSU Email Last Name from the menu. If you are a CSU employee with a professional or preferred last name, you can choose this option instead of your legal last name; otherwise this menu will be disabled.
  4. Select your CSU Email Domain if you are affiliated at more than one CSU campus or your campus is not already selected. (Choose colostate.edu for Fort Collins or csupueblo.edu for Pueblo.)
  5. Verify that the New Email Address displays the email address you wish to use.
  6. Click Save to save the changes.

How long will it take for an email alias change to take effect?

The process of creating or changing an email account or address may take up to 2 hours to propagate across all systems.

What will happen to messages sent to my old email alias?

Messages sent to your old email alias will continue to be delivered to your inbox until the old email alias expires after 6 months.

Once it expires, any messages sent to it will be returned as "undeliverable" unless the alias is taken by someone else.

To prevent losing emails from important contacts, you may want to inform them that your email address has changed.

To determine who is still sending to your old address, you can automatically copy the message to a folder you create.

  1. Log in to Outlook.
  2. Create a folder to hold copies of the messages.
  3. Go to Settings, Mail, Rules, + Add new rule.
  4. Add a condition Message header includes and enter the old alias.
  5. Add an action Copy to and select the folder. Click Save.
  6. Test by sending a message from a non-CSU email account to the old alias.

In Outlook for Windows, you can create a rule to send an automatic message to inform the sender of your old and new email address.

  1. Right-click any message and click Rules, Create Rule...
  2. Click Advanced Options...
  3. Check with specific words in the message header.
  4. Click the specific words link in step 2.
  5. Enter your old email alias, click Add and clik OK. Click Next.
  6. For the action, check have server reply using a specific message.
  7. Click the specific message link in step 2.
  8. Enter the subject and message, and click Save & Close. Click Finish.
  9. Test by sending a message from a non-CSU email account to the old alias.

Will the change affect how I log in to my existing email account, or will a second email account be created?

No, the change in your email alias will not affect how you log in to your existing Microsoft 365 account. You will continue to use your NetID@colostate.edu as your username and your NetID password to log in. There will not be a second email account created.

In what systems do email aliases appear?

Your email alias will automatically appear in in systems such as Microsoft 365 (Outlook, Teams, etc.), Gmail, the CSU Online Directory, Canvas, and many other systems at CSU.

What is my deliverable email address?

Your deliverable email address is your NetID@colostate.edu.

The deliverable address refers to the internal name for the location on a mail server where your emails are stored. It is the actual address to which emails sent to your email alias are delivered.

Your deliverable address is also used as your Microsoft 365 account login and User Principal Name (UPN) in Microsoft Windows Active Directory.

As a CSU Fort Collins student prior to 2018, I was given a CSU @rams Gmail account.
Can or should I change my primary email address to a Microsoft 365 account?

The choice is yours. You can keep both accounts while at CSU, though you can't switch your primary email alias from Microsoft 365 back to Gmail. For more information, see Email Accounts and @RAMS Accounts.

Where can I get more information about email accounts and login at my campus?

For more information about email accounts and login specific to your campus, please refer to the Email Login and Help page.

Preferred Names

What are preferred names?

You may want to use preferred first and last names that are different from your legal names.

For example, many people have nicknames, and someone with hyphenated last names may want only one of the last names displayed.

What CSU systems display preferred names?

The CSU Online Directory, Outlook Address Book, and many other services at CSU have been customized to display your preferred names.

For examples of student systems at CSU Fort Collins that use preferred first name, see Change My Information: Preferred First Name vs. Legal Name Usage (CSU Office of the Registrar).

How can I change my preferred first name?

  1. Go to View/Update > Preferred First Name.
  2. Update your preferred first name and click Save.

How can I change my preferred last name?

CSU Fort Collins Employees

Who should I contact about legal name changes?

  • Students: Contact the Office of the Registrar.
  • Faculty/Staff/Associates: Contact your hiring/onboarding Departmental HR Representative.

Privacy

Is my information displayed in the CSU online directory? How can I opt in or out?

View your information in the CSU Fort Collins Online Directory.

Students

As part of the Family Educational Rights and Privacy Act (FERPA), CSU Fort Collins students have the option to exclude your email address from the University's public online directory.

Opting out means that your family, friends or others searching for your email address will not be able to locate it though the online directory.

Your email address (just like your postal mail address) will be available to University personnel to keep you informed regardless of your FERPA selection.

Change your privacy settings in RAMweb

Learn more about FERPA and Student Privacy

Faculty and Staff

Faculty and staff are public employees and are required to be in the directory.

Associates

Associates are not in the directory by default. To be included the directory, contact your Human Resources liaison.

Service Accounts

Uses

What is a NetID service account?

A NetID service account is a CSU NetID that is owned by a department.

Most service accounts include a Microsoft 365 account (including Outlook for email, OneDrive for cloud storage, and other Microsoft Office applications), but some do not, including administrative service accounts.

What are the acceptable uses of a NetID service account?

A NetID service account can be used by one CSU faculty and staff member, or multiple faculty and staff by securely sharing the username and password if necessary.

Common uses include:

  • A central email address for shared contact and support (for a department, unit or website). (Consider a shared mailbox for this purpose if this is the only requirement.)
  • An email account with a short email address (such as depthelp@colostate.edu) that the owner might want to configure to serve as an alias and automatically forward all mail to a shared mailbox with a longer email address (such as dept_helpdesk@colostate.edu) so the service account password does not need to be shared.
  • A secondary inbox for a single person to receive emails for specific purposes, such as a secondary job role or large student documents.
  • Group access to CSU lab or facility resources where authentication from multiple individual CSU user accounts is not feasible or practical.
  • Short-term access for non-CSU partners (e.g. training, conference or workshop attendees who need to be contacted via CSU email, or would be too constrained by the csu-guest Wi-Fi, and guest speakers who need to use computer labs). The password should be updated after each use.
  • A true service account: a non-personal digital identity for machine-to-machine communication, application and data access, and running batch jobs, scripts or automated services.
  • IT, PC, software or web development testing or logging.

Service accounts are subject to the CSU Information Technology policies, including Acceptable Use for Computing and Networking Resources and Information Technology Security.

What if I only need a shared mailbox, email alias, or mailing list?

You do not need a service account if you only need a shared mailbox or mailing list for your unit.

  1. Review information about CSU Microsoft 365 resource management including:
  2. Look up and contact the CSU Microsoft 365/Exchange Resource Coordinator for your department.

What if I only need to share documents and files?

You do not need a service account if you only need to share documents and files within your unit. Some options include:

Shared Drives

Collaboration Tools and Websites

Can a service account be used for testing SSO, MFA and access control?

Service accounts can function for basic testing of single sign-on.

However, by default an LDAP record is not created, so no LDAP entitlements or other attributes are released to applications, and many systems rely on CSU ID for access.

Only a small number of service accounts have an LDAP record. They have been created for testing purposes or administrative accounts for automated services, and they a very limited set of test attributes.

A primary NetID account is generally needed to test attribute release and group- or role-based authorization in a Shibboleth-protected web application.

A shared account that can access many CSU resources is a security issue.

Users

Who can request, use and administer a service account?

Service account users and administrators must be CSU Fort Collins faculty or staff members.

CSU Microsoft 365/Exchange Resource Coordinators should submit service account requests on behalf of CSU faculty and staff members.

Multiple people can administer a service account. Administrators for each service account are members in a service account Grouper group.

Can a service account be used for providing an account to vendors and others outside of CSU?

Service accounts should only be used by CSU faculty and staff.

If an account is needed for others, request a guest associate NetID from your departmental Human Resources representative.

Additional information about associates from CSU Human Resources:

Who owns service accounts?

Although one or more individual faculty and staff members can use and administer a service account, each service account is associated with and owned by a department.

This assures that new administrators can be easily assigned to the service account in Grouper when the previous administrator departs.

Secondary NetID Migration

Were existing secondary NetIDs be migrated to NetID service accounts?

All existing secondary NetIDs (formerly called secondary eIDs) that were requested for migration in 2022, and all active secondary NetIDs created after July 2022, were migrated to NetID service accounts on May 31, 2023.

To list service accounts you administer, go to View/Update > Service Accounts.

To double-check that your service accounts have been added in Grouper, Log in to Grouper (requires CSU GlobalProtect VPN login to access from off campus), click My Groups and filter for Service_Accounts if necessary. Screenshot of My Service Account Groups

If one of your secondary NetIDs is missing, please contact us to determine the current status and have it migrated if necessary.

How did my secondary NetID account change, if it was migrated to a service account?

Details of service accounts including your access to the existing email account did not change during the transition.

You can use the Service Accounts page to view details of each service account, change the password, and manage the service account administrators. (Service account administrators can also be managed in Grouper.)

If my secondary NetID will not be migrated to a service account, when will it be deactivated?

Secondary NetIDs that you did not select for migration to a service account will be unavailable for password changes starting May 24, 2023 and will be deactivated on October 2, 2023.

If you would like your secondary NetID deactivated immediately, please contact us. Otherwise, you can simply let it be deactivated.

Will secondary NetIDs and service accounts continue to be displayed in WEID_DIR_PERSON_00?

Secondary NetIDs are no longer in the WEID_DIR_PERSON_00 Banner database table since the table was replaced by a view during the NetID migration in July.

Current service account data is available to NetID administrators and service account requesters in the Admin menu on the Service Accounts page.

Creation

How do I request a new service account?

Copy the following table and paste into an email message to a Service Account Requester or CSU Microsoft 365/Exchange Resource Coordinator for your department or unit:

Subject: NetID Service Account Request

Question My Answer
Does the service account need a Microsoft 365 account? (Yes/No)
(Outlook for email, OneDrive for cloud storage, and other Microsoft Office applications)
 
Email domain
(colostate.edu for CSU Fort Collins or csupueblo.edu for CSU-Pueblo)
 
NetID of service account
(2 to 8 lowercase letters and numbers, starting with a letter)
 
NetID of primary administrator
(often your NetID)
 
Department number  
Department name  
Unit name
(may be same as department name)
 
Account Information
(For internal reference in the NetID system and Grouper.
Will not be published to Microsoft 365 or the Global Address List.)
Account name
(A friendly name for the service account. May be a program or service name.)
 
Account description
(Account purpose, uses, users, etc.)
 

Your CSU Microsoft 365/Exchange Resource Coordinator can review your request, approve it, and submit it as a Service Account Request.

What is the required NetID format of a service account?

2-8 lowercase letters (a-z) and digits (0-9), starting with a letter.

Not allowed: Uppercase letters, spaces, underscores, hyphens, accents, special characters

If your unit needs an email address with more than 8 characters, contact your CSU Microsoft 365/Exchange Resource Coordinator to request a shared mailbox.

Do service accounts have a CSU ID?

Service accounts do not have a regular CSU ID because they are owned by a department and not an individual.
(This makes it easy to add and remove service account administrators in Grouper.)

The CSU ID of the initial administrator is stored for administrative purposes only.
(Also, a 9-digit number starting with 2 is generated as an identifier for applications that require a CSU ID.)

Administration

How can I administer my service accounts?

  1. Click Login, select your campus, and log in with your primary NetID.
  2. To list service accounts you administer, go to View/Update > Service Accounts. Screenshot of View My Service Accounts
  3. To administer or view full details of a service account, click the Service Account NetID in the left column of the table. Screenshot of View or Edit Service Account
  4. To update details of the service account, change editable fields Account Name and Account Description and click Save. (Other details can only be updated by NetID full admins.)
  5. To change the password, click Change Password and see instructions below.
  6. To view or change the service account's administrators, click Manage Admins and see instructions below.

How do I change the service account password?

  1. Click Login, select your campus, and log in with your primary NetID.
  2. Go to View/Update > Service Accounts.
  3. Click the Service Account NetID in the left column of the table.
  4. To change the password, click Change Password. You will be prompted for a new password for the service account.

Note: Only service account admins can change the password. (You cannot change the password by logging in to the NetID website with your service account NetID and password.)

How do I share the service account password securely?

Share passwords verbally (in person or by phone), through encrypted email, or through a password manager.

Unencrypted email, SMS text messages, plain text files, and instant messengers generally are not secure ways to share passwords.

How do I view or change a service account's administrators?

Consider adding at least one person or group to serve as a secondary or backup administrator, such as your department's IT administrator or group, CSU Microsoft 365/Exchange Resource Coordinator or group, or department head.

  1. Click Login, select your campus, and log in with your primary NetID.
  2. Go to View/Update > Service Accounts.
  3. Click the Service Account NetID in the left column of the table to view the service account details.
  4. Click Manage Admins to view the service account admins. Screenshot of Service Account Admins
    • To add an admin, type the person's NetID in the NetID of New Admin field and click Add Admin.
    • To add an IT admin group, select the group in the IT Admin Group drop-down list and click Add IT Admin Group.
    • To add a Microsoft 365/Exchange Resource Coordinator group, select the group in the Microsoft 365/Exchange Resource Coordinator drop-down list and click Add MS365 RC Group.
    • To remove admins, check one or more boxes in the Current Admins list and click Remove Selected Admins.

You can also edit the service account admins directly in the Grouper group (e.g. to add an unlisted group).

  1. Click Manage Admins in the Grouper section.
  2. You will log in to Grouper and view the service account group.
    • All group members listed under the Members tab are administrators of the service account.
    • To add an admin, click the + Add Members button. Type the person's NetID in the Member name or ID: field. Click the person's name when it appears below the field. Click Add. Screenshot of Add Member to Service Account Group
    • To add an entire group of Resource Coordinators for your department, search for exchange_resource <department>, where <department> is the name or four-digit department number of your Resource Coordinator group.
      Resource Coordinator groups are in the basis:sqlprod:exchange_resource folder. (The group name is a number.)
      For multiple results, mouse over the name of each result to find the correct group and primary Resource Coordinator (RC). Screenshot of Search for Exchange Resource Group Screenshot of Add Exchange Resource Group to Service Account Group
    • To remove an admin, find the person's name under Entity name and select Revoke membership from the Actions menu to the right. You should not remove yourself until after you have added another member. Screenshot of Revoke Membership in a Service Account Group

What is Grouper and how do I use it?

Grouper is a web-based tool for creating, viewing and managing groups, members, roles and permissions. These groups are used to authorize access to NetID service accounts and many other CSU online applications.

For more information, see Grouper at CSU (requires CSU GlobalProtect VPN login to access from off campus).

To add or remove group members, see instructions for Grouper Group Management (PDF).

What are LDAP entitlements, and how are they used by the NetID website?

Lightweight Directory Access Protocol (LDAP) is a directory of user information which applications use during authentication (login) and authorization (allowing access).

An LDAP entitlement is a value in a person's LDAP record that applications use to determine whether a person is authorized to access an application and its features.

Grouper groups can add entitlement attributes to LDAP records. After single sign-on, Shibboleth releases LDAP attributes to applications.

NetID admins can see a person's entitlements at Person Admin > LDAP:
https://netid.colostate.edu/admin/ldap.aspx?netid=<netid> (where <netid> is a person's NetID)

examples of CSU LDAP entitlements, with service account entitlements highlighted

The NetID system assigns roles and permissions based on LDAP entitlements that begin with https://colostate.edu/netid/.
(Note: Although these attributes are formatted as URLs, they are not web addresses.)

Examples of NetID LDAP entitlements
NetID Role LDAP Entitlement
NetID Read-Only Admin https://colostate.edu/netid/readonly/admin
NetID Help Desk Admin https://colostate.edu/netid/helpdesk/admin
NetID Partial Admin https://colostate.edu/netid/partial/admin
NetID Admin Requester https://colostate.edu/netid/admin/requester
NetID Service Account Requester https://colostate.edu/netid/serviceaccount/requester
NetID Service Account Admin https://colostate.edu/netid/svc_acct/<netid> (where <netid> is a service account NetID)

Who can view service accounts in the NetID system?

NetID admins and service account requesters can view a list of all service accounts at Admin > Service Accounts.

NetID service account requesters can also view their own service account requests, and edit their requests that have not yet been processed (with status "requested").

NetID service account administrators can view the individual service accounts they administer at View/Update > Service Accounts.

Can I set up Duo two-factor authentication for my service account(s)?

This feature is not currently implemented, but it would increase security, so it is being considered for development.

How do I access the Microsoft 365 account of my service account (Outlook for email, OneDrive for cloud storage, etc.)?

  1. Go to Microsoft 365 Outlook.
  2. Sign in with your service account NetID and domain (netid@colostate.edu) and your service account password.

Where can I learn more about service accounts?

Review the presentation slides from the Open Forum on NetID Service Accounts (PDF, May 24, 2023).

Watch the Microsoft Stream recording (requires NetID login).

NetID Administration

Who should serve as a NetID administrator, and what functions does a NetID admin perform?

NetID administrators are CSU faculty and staff whose job duties require them to support other CSU faculty, staff and students in using the NetID website, including to activate their NetID, change or recover their NetID password, and view and change their information.

For more information and instructions, including requesting NetID admin access, CSU faculty and staff can view the NetID Admin FAQ after logging in with their NetID.

Need help? Contact Us.