ESL Guide for Machine Account Owners

Important message for all Machine Account Owners.

Context

The Education Sector Logon (ESL) is being upgraded over the period to June 2018. The upgraded system is now live in Pre Production, and is scheduled to be upgraded in Production at the end of March 2018.

What is a Machine Account Owner?

Machine accounts are a type of ESL account that is used by Student Management Systems (SMSs) to log in to education sector systems such as the National Student Index (NSI) and Early Learning Information (ELI).  It has previously been standard practice to have a user account linked to each machine account. However in the upgraded ESL, this linked user account is now known as the Machine Account Owner. Only the Machine Account Owner can set or reset the password for a machine account – Education Service Desk can no longer do this.

ESL self-service

The upgraded ESL provides a simple interface for the management of machine accounts. You must log-in using your individual user account in order to manage your machine account(s).

ESL Self Service [Production] is at https://identity.education.govt.nz/ui/selfservice/home

ESL Self Service [Pre-Production] is at https://iteidentity.education.govt.nz/ui/selfservice/home 

ESL Self Service [UAT - Shared Test] is at https://identity.educationtest.govt.nz/ui/selfservice/home

Key changes to machine account behaviour with the upgraded ESL

A summary of the changes to machine accounts is:

  • The upgraded ESL enforces stronger distinction between user accounts and machine accounts
  • You can no longer login to websites with a machine account, including to ESL self-service.
  • A Machine Account Owner must log in with their individual user account to complete the setup of a new machine account or to change the password for their machine account.
  • Machine accounts do not get ‘locked’ in the upgraded ESL. This will make the sequence of updating a password easier for Machine Account Owners.
  • Education Service Desk cannot set or reset the password for a machine account.

FAQs

Question

Answer

Does a Machine Account Owner have to be an existing ESL user?

Yes, a Machine Account Owner must have an ESL user account.

How does a user complete a machine account invitation?

You must log in using the Machine Account Owner’s ESL account (not the machine account) to set the password for the machine account.

How does a user change a machine account password?

You must log in using the Machine Account Owner’s ESL account (not the machine account) to change the password for the machine account.

Do machine account passwords expire?

No

Can machine accounts become locked?

No

Further information

For further ESL support information, go to:

http://services.education.govt.nz/education-sector-logon/user-support/