An Introduction to Secure Access Phase 2 1. Background to Secure Access Secure Access (SA) was...

1

An Introduction to Secure Access Phase 2

2

Background to Secure Access• Secure Access (SA) was introduced on 10 December 2012

to provide Local Authorities and Schools with a single,

secure point of entry to Departmental IT systems (currently

COLLECT, School 2 School (s2s) and Key to Success (KtS))

and to ensure that the data that they hold is much better

protected;

• It replaced the previous “Authentix” system;

• All current schools and LA personnel who use S2S and/or

COLLECT were migrated to SA;

3

Background to Secure Access• An enhanced version of SA (Phase 2) will be launched on

9th December;

• This will provide individual Secure Access accounts within

schools and academies who currently have shared

accounts (Local Authority users already have individual

accounts)

• In support of that, the facility to create and administer SA

accounts locally will be provided by introducing an

‘Approver’ role within each organisation (i.e. School,

Academy or Local Authority).

4

The Approver Role• An Approver will have the same access as an End User

but with additional user management privileges;

• Approvers will have the ability to:

- Search for users within their organisation

- Add new user accounts

- View user accounts

- Edit and archive user accounts

- Add and remove access to Departmental systems as

required, and where access is granted to COLLECT,

specify/select the data collection(s) that are able to

be accessed by the requestor.

5

The Approver Role• Within a Local Authority, the Contact Liaison Officer (CLO)

will undertake the approver role;

• Within schools, a nominated member of staff (who could be the existing account holder for the shared account) will undertake the role;

• COLLECT Access will no longer be managed by the EDD Helpdesk and it will be the responsibility of the Contact Liaison Officer and individual schools to add and remove access to data collections within COLLECT

• Users will have their accounts upgraded on 9th December to the Approver account type;

6

Account claiming process

• A flag will be set for all user accounts given ‘Approver’ role

to activate a ‘claim’ process on subsequent login to SA

following the launch on 9th December;

• User logs in;

• User is shown a confirmation screen asking them to

confirm they are authorised to claim this Approver account;

• If the user is the authorised individual for this account they

click ‘Confirm’ and continue to the next page;

7

Account claiming process

• If the user is not the authorised individual for this account,

they click ‘Cancel’ and are logged out and returned to the

Login page;

• The Approver will be forced to select a new password and

enter a new security question and answer, and will not be

allowed to enter one that has been used previously for their

account;

8

9

Confirmation of authorised user - School

10

Confirmation of authorised user – LA

11

Confirm user details

Filled in automatically

Validation in place to ensure a previously used question or answer cannot be entered.

12

Approver can now add additional accounts

13

Approver chooses whether to add accounts now or later

Limited to 5 end user accounts – schools only

14

Approver chooses to add new accounts now

15

Approver chooses to add accounts later

16

Searching for users (and viewing user accounts)

17

Administration tab

18

Searching for users

19

Select 'Details'

20

View user’s account

21

Adding a new user

22

Click on Administration tab and Select add new

23

Enter user details

Automatically filled in so cannot link to incorrect organisation.

24

SA calculates which Application groups should be visible to user based on the user details entered e.g. LA = All collections, Independent School = Independent School Census only. User selects groups

25

Click save to confirm

26

Editing user accounts

27

Search for user as shown in searching for users section, select account then Select 'Edit' button

28

Edit the fields required and save user’s details

29

COLLECT Access

30

Collect Access• All existing COLLECT users will be migrated over to Secure

Access and the relevant tick boxes completed

• If you grant access for 2013 it will automatically carry forward for

any future years unless removed

• When any of these collections are selected and the account

saved the user will have immediate access within COLLECT

• As CLOs grant access now we would expect a process to

already be in place to authenticate a user prior to granting

access to a collection at LA level

• Key to Success for LAs will still be managed by the RA Mailbox

with tokens

31

COLLECT Access will now be managed via the user edit screen for the following COLLECT Groups

LAs

Alternative Provision Census School Census Spring

Appeals Against Exclusions School Census Summer

Appeals Against Admissions School Census Autumn

Children In Need S251 Budget

Consistent Financial Reporting S251 Outturn

Early Years Census SEN2

Early Years Foundation Stage Profile School Workforce Census

Keystage 1

Phonics

Parental responsibility

Private Fostering

SCAP – Forecasts

SCAP – Capacity

32

Schools

Consistent Financial Reporting

School Census Spring

School Census Summer

School Census Autumn

Independent School Census

School Workforce Census

• Schools will be advised in guides if they do not use COLLECT then they do not need to add it to their list of access permissions.

• Please note: Every 100 days Secure Access forces a password re-set

33

Archiving - For use when a staff member has left or an account is no longer used.Search for user as shown in searching for users section, click edit, select archive account and enter reason. Then save. This immediately deactivates the account.

You can also use the same Section for re-activating an account.

34

Reset user’s password

35

Search for user as shown in searching for users section, click Reset password. An email is automatically sent to the registered email address. The user has 48hrsbefore the link expires.

36

Re-send account activation link

• If a user doesn’t click their account activation link in their

activation email within 48 hours, the link will expire for

security reasons;

• An Approver can click a button on the user’s form to re-

send them their activation email with a new activation link;

37

Approver transfers their access rights

38

Click on ‘Your Account’, select 'Transfer your Approver rights'

39

A list of the accounts for your organisation will be shown, select account you wish to transfer access to, enter the answer to your security question and click apply. This will immediately transfer the Approver role.

40

Archiving approver accounts

• Approvers cannot archive their own account

• They must transfer their Approver rights to another

account.

• The old Approver will then become an End user account

• At which point the new Approver may archive their account

41

Contacts and Guides

Updated guidance documents will be available on the

following Secure Access Web Page: http://

www.education.gov.uk/researchandstatistics/datatdatam/secureaccess

Secure Access Login Page: https://sa.education.gov.uk

For any enquiries please use the Secure Access Service

Request Form: https://

www.education.gov.uk/researchandstatistics/datatdatam/secureaccess/service-request-form

42

Any Questions?