XID General FAQ
 
 
Frequently Asked Questions
What is an XID?
Who can get an XID?
If a person has an HUID, can they also get an XID?
As an XID holder, what are my responsibilities?
Who is an XID Manager?
As an XID Manager, what are my responsibilities?
Are there different kinds of XIDs?
Is it okay to have more than one XID?
What do I do if I know my login, but can't remember my password or my challenge response?
What if I don't remember my login?
I can't seem to get a new XID using the same email address. What's wrong?
 
 
What is an XID?
XID stands for eXtended ID. It is a type of user ID that can be used to access a subset of the online applications that work with Harvard's web authentication system.
 
Who can get an XID?
A person does not need a Harvard affiliation to get an XID. However, systems only recognize the XID accounts that they specifiy, so obtaining an XID doesn't result in getting access to any systems.
 
If a person has an HUID, can they also get an XID?
Yes. It may be useful as a more anonymous login for certain systems.
 
As an XID-holder, what are my responsibilities?
  • Activate your XID as soon as possible.
  • Keep your XID attributes up-to-date, especially your email address.
  • Do not share your password with anyone.
  • Do not share your challenge/response with anyone.
  • Try to re-use your XID by notifying XID Managers or system owners that you have one rather than creating a new XID account for each new application that you wish to access. (It is easier to track them that way.)
  • Treat your XID/Password/Challenge/Response as the keys to your digital identity.
 
Who is an XID Manager?
Certain individuals are granted the privilege of being a XID Manager so they can distribute XIDs to people who need to access systems they control. An XID Manager is capable of creating managed XIDs, editing the XIDs that they manage, transferring control of XIDs to other managers, and setting expiration dates on XIDs they control. However, they cannot create or set the password for an XID (although they can ask the system to send an email the XID holder with information on how to reset it).
 
As an XID Manager, what are my responsibilities?
  • Make sure users are aware that you can help them create or edit their XID profiles.
  • Make yourself available to users who have XID related questions.
  • Verify physical credentials (ID, email, etc.) before creating a managed XID(s) for an individual.
  • Verify a users physical credentials (ID, email, etc.) before editing an XID(s) for an indivudual.
  • Transfer control of an XID(s) to other managers if your feel the other manager is better positioned to help the user.
  • Set appropriate expiration dates on XIDs you control.
  • Reset a user's password if requested by the user.
  • Do not share manager credentials with anyone unless it is a group XID, and share only with bonafide group managers.
 
Are there different kinds of XIDs?
No. XIDs are created by self-registered users or are created by managers who verify users' information before creating them.
 
Is it okay to have more than one XID?
Yes, but typically one is enough.
 
What do I do if I know my login, but can't remember my password or my challenge response?
If you got your XID from an XID Manager, you may ask the manager to reset your password. The system will then send you an email with instructions that you can use to set a new personal challenge, response, and password.

If you registered for your own XID via self-service at xid.harvard.edu, and you have a current email address stored in your XID account, you should go to the XID site and attempt to change your password by clicking on the "Existing Users" link on the main page, then clicking on the "Change Your Password" link on the next page and following the instructions. When you are instructed to answer your personal challenge, try to remember your response and attempt to answer your challenge question several times. After several failed attempts to answer your challenge the XID system will notify you that your account has been temporarily deactivated for your own security. The system will then send you an email with instructions that you can use to reactivate your account, set a new personal challenge and response, and set a new password.

If you registered for your own XID via self-service at xid.harvard.edu, but you have not specified an email address for your XID account or the email address stored in your account is not current, then you will not be able to access that XID account anymore. Unfortunately, your password is stored in the database in such a way that no one else can access it. You will need to register for a new XID account and then convey your new XID to the owner of any application that you accessed with your old XID. (This is a good reason to keep your email address up to date!)

 
What if I don't remember my login?
If you got your XID from an XID Manager, contact your XID Manager for assistance.

If you registered for your own XID via self-service at xid.harvard.edu, you will need to go to the XID site again and register for a new XID. Important: If you get a new XID, you must tell the system owner(s) of any system you use about your new XID account. They will need to update their system access control lists in order to give your new XID access to their system.

 
I can't seem to get a new XID using the same email address. What's wrong?
The system requires all XID holders to have a unique email address. If you forget your login, password, and challenge response, and need to get a new XID, you'll need to use a different email address to sign up for the new account.
 
 
 
 
Policy  |   FAQ  |   Contact Us  |   Privacy
© The President and Fellows of Harvard College