LEA Administrators and Data Auditors

Will a PowerSchool Admin still be able to set a timeout (e.g. 5, 10, or 15 minutes) after the integration with IAM?


PowerSchool administrators can continue to configure timeouts for PowerSchool (e.g. 5 minutes, 10 minutes, etc.). Other applications may have different timeout settings which may vary from application to application. See also..  https://ncedcloud.mcnc.org/content/what-are-default-timeouts-saml-identi...

Sometimes Single Sign-On (SSO) doesn't work and I'm asked to logon to each application. Why is that?


Browser tabs or windows opened in “private” or “incognito” mode will prevent session information from being shared between other tabs/windows. As a result there is no memory of logons done within other tabs, hence accessing NCEdCloud IAM applications in a different private tab or window would require an additional logon.  Private or Incognito mode should be disabled when using your browser for NCEdCloud Target Applications (e.g. Home Base applications, Google Apps, Discovery Education, Follett Destiny, etc).


Will the IAM Service affect my local accounts?

No, there is no requirement that you make any changes to your user accounts within your LEA. The UID number however is the login for cloud-based services such as HomeBase and other NCEdCloud IAM apps (should you choose to adopt them).  Whether an LEA chooses to use NCEdCloud IAM accounts within their local district services is up to you. If it is of interest to do so, it is possible the NCEdCloud IAM’s CDLR service could help facilitate that. 

What if there is no email address in employee or student data?

There are several important drawbacks for users without an email address within the service.  For example:

  1. LEA Administrators and other employees that use the Workflow features of the IAM service would have no way to automatically be notified by the IAM service of their workflow-related task items.

  2. Some target services require the email address.  Without having email associated with the provisioned user account, functionality of those target services could be significantly impacted.

How do I search my Users for those without an email address?

The easiest way to search for user records that are missing an email address is to select the Manage Employees tab or the Managed Students tab (under Profiles) and then do an Advanced Search for [Last Name = *] AND [Email != * ].  This search string looks at all users (since you entered an asterisk for Last Name) and where the Email field DOES NOT equal "something".  In otherwords, if there is an entry in the email field, it skips that record.  If the user's email field is empty/blank/null then it is displayed because