View Poll Results: How is Serco's ePortal implemented at your school?

Voters
13. This poll is closed
  • Two Factor Authentication

    1 7.69%
  • Single Sign On

    2 15.38%
  • SSL

    4 30.77%
  • No SSL

    1 7.69%
  • SSL via ISA

    4 30.77%
  • Other

    0 0%
  • Don't care

    2 15.38%
Multiple Choice Poll.
+ Post New Thread
Results 1 to 8 of 8
MIS Systems Thread, Parental Access to Serco ePortal - what are you doing? in Technical; We already have Serco's ePortal in school, secure web published via ISA 2k6, with secure SSL certificate. Our local authority ...
  1. #1

    Join Date
    Jul 2010
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Parental Access to Serco ePortal - what are you doing?

    We already have Serco's ePortal in school, secure web published via ISA 2k6, with secure SSL certificate.

    Our local authority are requesting that we use Two-Factor authentication rather than just the Serco username and password to provide Parental Access for Autumn 2010 Implementation. Due to rules with our local authority, that now connect to Government Connect (GSX network), they have recommended and stipulated that we use Two-Factor authentication. It's possible that they'll provide the funding, so cost may not be a factor here. (yes, we know that could mean a big bill for the authority, if all 1900 parents, get an RSA SecureID fob in the mail, renewalable every three-five years).

    What are other schools doing?, as far as security and authentication, two factor authentication is concerned, and how to integrate into ePortal with ISA 2k6?
    Last edited by jjenkins; 27th July 2010 at 08:38 PM. Reason: typo - grammar!

  2. #2

    Join Date
    Jul 2007
    Location
    Wolverhampton
    Posts
    18
    Thank Post
    3
    Thanked 4 Times in 4 Posts
    Rep Power
    15
    We are working with a number of schools to provide a Sharepoint Learning Platform with links back to CMIS (for reporting and parental access etc.)

    Any advice I have seen (e.g. from Becta) suggests that parents don't need to have 2 factor authentication. The only time this should be required is for teachers who have remote access to multiple pupil records.

    I can imagine that trying to provide this to parents would not just have a cost in terms of providing the fobs but would also be a huge admin overhead (e.g. lost/replacement fobs, technical assistance on how to use and issues with synchronisation etc.) Are you sure that the LA are mandating this for parental access?

    Steve
    Novotronix Ltd

  3. #3

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,480
    Thank Post
    372
    Thanked 657 Times in 537 Posts
    Rep Power
    162
    The LA should have the schools network cut off from the corporate network, and any connections held at arms length by a pretty firewall which is behind another firewall thus the schools are free from the GCSX\CoCo requirements.

    Two type for parental I think was at best, a recommendation, for staff a must - at least that's what I understood Becta was saying.

    Like Steve said, the cost would be extremely high, especially in this climate.

  4. #4

    Join Date
    Apr 2007
    Location
    Peterborough
    Posts
    55
    Thank Post
    2
    Thanked 9 Times in 5 Posts
    Rep Power
    17
    We use CMIS ePortal here (currently) to provide parents with a view of their childs data. This is accessed via an ISA server and authenticated by AD username and password. The same credentials are used within ePortal as SSO is enabled and active. If you follow the BECTA recommendations you should reach the conclusion that parental access only grants access to individual sets of details and not bulk or whole school records, therefore two factor authentication does not need to be applied.

  5. #5

    Join Date
    Jul 2010
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by matt40k View Post
    The LA should have the schools network cut off from the corporate network, and any connections held at arms length by a pretty firewall which is behind another firewall thus the schools are free from the GCSX\CoCo requirements.

    Two type for parental I think was at best, a recommendation, for staff a must - at least that's what I understood Becta was saying.

    Like Steve said, the cost would be extremely high, especially in this climate.
    So with ePortal how do you turn-on two-factor for staff and none for parents?

  6. #6

    Join Date
    Jul 2010
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    the example, that our LA stated, was if the student found his/her parents username and password, the student would be able to logon and view their records. If the parent had the fob on their keyring, they would not be able to do this, there is an agrument, that they could also obtain the fob as well.

  7. #7

    Join Date
    Jul 2010
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    so are you creating parents accounts in AD?

  8. #8
    RobFuller's Avatar
    Join Date
    Feb 2007
    Location
    Chelmsford
    Posts
    316
    Thank Post
    83
    Thanked 39 Times in 29 Posts
    Rep Power
    22
    We use FreeRADIUS with our ISA firewall, everyone has AD accounts but then we issue our users with passcodes for home use. Including parents & students, staff we use a known number (to them). These passcodes are controlled by us and cannot match their AD passwords.
    Not perfect I know but adds another layer and totally free, better than nothing and we all know how weak peoples passwords can be even with rules in place. I dread to think managing remote keys to staff let alone parents.

    If you are serious about secure keys, have a look at these , I had some demo unit shipped over and they were very impressive. Very strong with no batteries to replace and a low unit cost. Their software plugged right into ISA and allows you choose if you wanted certain users to use keys or not (surprising not a common feature I found) AuthLite
    Last edited by RobFuller; 29th July 2010 at 12:35 AM.



SHARE:
+ Post New Thread

Similar Threads

  1. [ACS] Serco ePortal, external access and Fronter - your setup??
    By cheredenine in forum MIS Systems
    Replies: 9
    Last Post: 6th October 2012, 04:42 PM
  2. Serco ePortal Service not starting
    By darragh in forum MIS Systems
    Replies: 11
    Last Post: 30th September 2009, 09:42 AM
  3. Serco ePortal issues
    By stacey1985 in forum MIS Systems
    Replies: 5
    Last Post: 16th March 2009, 10:51 AM
  4. Serco eportal on Windows Mobile 6 PDA
    By noelp in forum Network and Classroom Management
    Replies: 3
    Last Post: 15th October 2008, 03:32 PM
  5. Quick ePortal question - Serco Facility
    By cheredenine in forum MIS Systems
    Replies: 0
    Last Post: 14th July 2008, 04:20 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •