Attention: Migrate Users To Blackbaud ID

Derek Nichols
Derek Nichols Blackbaud Employee
Ninth Anniversary Kudos 5 Name Dropper Participant
in Blackbaud Higher Education Solutions™ Announcements

We have an important update for you about Blackbaud ID. You’ve likely heard the news. Keep reading for tips and details.

The last day users can log in with legacy usernames and passwords is July 25, 2022. On July 26, all users must log in with Blackbaud ID.

Platform managers can migrate users to Blackbaud ID via the links on the Core home dashboard. They can also export user lists for use in mail merges and other communications.

Why?
Blackbaud ID enables each user at your school to access your Blackbaud products and services – such as Education Management, Raiser’s Edge NXT, Tuition Management, the user community, and more – with a single account. Additional benefits include:
  • Blackbaud ID is a platform capability that exclusively focuses on authentication and staying current with the ever-evolving security landscape. By transitioning to Blackbaud ID, your data is secured behind stronger authentication standards, and the BBEM development team can focus on other mission-driven initiatives to better serve you.
  • Blackbaud ID enables you to securely sign in to the Blackbaud solutions ecosystem. By default, it uses Blackbaud or Google's secure authentication service, but organizations can also enable single sign-on (SSO) to sign in through their identity providers and manage the users in their claimed domains.
  • Blackbaud ID provides enhanced password protection and brute force protection on all login attempts.
  • Blackbaud ID enables you to enhance security with multi-factor authentication through text messages or mobile authenticators.
  • Blackbaud ID provides secure access to multiple Blackbaud solutions and Support resources.
  • Blackbaud ID enables social authentication through Google, which uses Google's authentication requirements, password resets, and other support needs.
What do I need to do?
  1. Set up Single Sign-on (SSO) (recommended).
    1. If you have SSO set up in Core but not in the Admin Console, you will need to establish a new SSO connection directly within Admin Console for your BBID accounts.
  2. Customize your BBID login page branding.
  3. Customize your BBID invitation notification under Core > Communication > Notifications > User Management category - “Blackbaud ID Invite.”
  4. Invite users to log in using BBID.
How do I know if I need to establish a new SSO connection?
  1. If faculty and students at your organization are signing in with their school email address and being redirected to a non-Blackbaud page to authenticate with your Identity Provider, then your users are signing in with SSO.
  2. If everyone at your organization signs in by entering a username and password on the myschoolapp.com or mycampus-app.com website, and if you are able to reset the username and password for those users from their Core profile, then SSO is currently not enabled.
  3. Blackbaud recommends establishing a SSO connection between Blackbaud ID and your Identity Provider (often Google or Microsoft). An SSO connection improves your organization’s security posture by reducing the number of accounts an individual needs to manage.
FAQs
What is changing?
  • School admins will no longer be able to reset a username or password for users who are not on SSO with your identity provider. Users can recover their own accounts with a first-class experience – as long as they have access to their email. However, Blackbaud provides detailed instructions to help an administrator walk a user through the process.
  • You have the option to customize the summary and login help link text on the BBID login page.
What isn’t changing in July?
  • All schools who have an SSO connection will continue to manage those users directly with the Identity Provider.
  • Upon login, users will automatically be redirected to their landing page in BBEM
  • Minimum password strength
  • Existing customizable login help text in BBEM
Do board members and alumni need to be on my Identity Provider and SSO?
  • No! The vast majority of schools do not give these users school email addresses. Technically, none of your users have to be on SSO; they can register any valid email address with BBID as long as they own and can access the account.
Upcoming enhancements for Blackbaud ID in Blackbaud Education Management:
  • By late April, you’ll be able to opt into the BBID requirement ahead of time. On the Blackbaud ID authentication page in Core, simply select the "Enforce Blackbaud ID authentication” button to disable legacy authentication. We recommend doing this to ensure all constituents become familiar with the new login before the rush of back-to-school logins at the end of the summer.
  • By May, if you opt into the BBID requirement, you will also be able to offer a self-registration workflow for your non-SSO users. That means they will be able to log in with their legacy username and password and be directed through a BBID registration process.
  • Watch the weekly release letters for more information.
Webinars: Additional documentation:

Categories