Sims AD Sign on vs Traditional Logins What are you doing ?

[mattysmith80]

What are others doing in terms of Single Sign on / AD Integration vs Traditional Sims Logins....

[Steve21]

Personally we keep them separate still, auto-login could have issues with people accessing data they shouldn't etc, and unless people are moving around the building lots they're only going to log in once normally in a day

 

Steve

[mattysmith80]

Its a weird one isnt it...

 

Seperate username should make it more secure, but literally every teacher Ive ever known, logs on, opens Sims, logs in and then minimises Sims, so essentially any protection is just void.

 

I can think of more arguments for AD login... Especially when we never get told when someone is leaving / left.. When we disable their AD account it also then disables their Sims account too.

[Steve21]

But if a password is seen/leaked, it stops them accessing it (for example, student sees teacher log in to pc, later in day student logs on pc and has SIMs access etc).

 

And in regards to your disabling comment, I mean normally it should work the other way around If they're left in SIMs it sync's back to AD using your normal "tools" etc, but guess it depends how you're setup etc

 

Steve

[DrCheese]

We did AD integration years ago, dunno why you'd do anything else nowadays. Just beat them repeatedly to lock their computers when away & have HR strong enough to do that.

[DrBeaker]

Separate AD versus SIMS logon - always been that way in every school I've worked in.

 

I can see the pros of the AD auth/SSO though.

[robyholmes]

I'd say someone could access just as much confidential information outside of SIMs than they could in it. Let's face it, how many areas do we store things in because storing it in SIMS is either not possible or just crap.

 

To my mind, your better off doing SSO and training staff to lock computers. It's give and take, you provide quicker access and they follow the rules of locking computers. If you take the view an extra login solves the issue of computers being unlocked, your admitting staff can't follow rules. How many other rules are they then not following? Don't share password, don't email kids details to your home email. Don't give you login details to the visitor you have in class today, in case the screen locks.

 

It's up to SMT at the end of the day to enforce rules. You can make staff happy by getting rid of another password.

[jthompson]

AD auth here. I'd love for it to prompt anyway, and have a timeout lock as well, but hey. SIMS is only deployed to 'staff' machines and teachers are all teaching from their laptops, which reduces the opportunity for students to use a stolen password against SIMS.