Support for Machine Account Owners

The Education Sector Logon (ESL) is being upgraded over the period to June 2018. The upgraded system is now live in Shared Test, Pre Production, and Production.

What is a Machine Account Owner?

Machine accounts are a type of ESL account that is used by Student Management Systems (SMSs) to log in to education sector systems such as the National Student Index (NSI) and Early Learning Information (ELI).  In the upgraded ESL, the Machine Account Owner is responsible for the management of the machine account/s they own. Only the Machine Account Owner can set or reset the password for a machine account – Education Service Desk can no longer do this.

ESL Self Service

The upgraded ESL provides a simple interface for the management of machine accounts. A Machine Account owner must log-in to ESL self Service with their individual user account in order to manage their machine account(s).

ESL Self Service [Production] is at https://identity.education.govt.nz/ui/selfservice/home

ESL Self Service [Pre-Production] is at https://iteidentity.education.govt.nz/ui/selfservice/home 

ESL Self Service [UAT - Shared Test] is at https://identity.educationtest.govt.nz/ui/selfservice/home

Key changes to machine account behaviour with the upgraded ESL

A summary of the key changes to machine accounts are:

  • ESL enforces stronger distinction between user accounts and machine accounts
  • You can no longer login to websites with a machine account, including to ESL self-service.
  • The Machine Account Owner must log in to ESL Self Service with their individual user account to complete the setup of a new machine account.
  • The Machine Account Owner must log in to ESL Self Service with their individual user account to change the password for their machine account.
  • Machine accounts do not get ‘locked’ in the ESL. This will make the sequence of updating a password easier for Machine Account Owners.
  • Machine account passwords no longer expire in the ESL. This will make the sequence of updating a password easier for Machine Account Owners.
  • Education Service Desk cannot set or reset the password for a machine account.

Resetting the password for your SMS

To reset the password for an ESL account used in your Student Management System (SMS) you will need to complete the password reset process in ESL before you enter your updated password into your SMS.

For a machine account, you must log in to self-service with your individual user account to change the password for the machine account.

For your user account, if you have forgotten your password you must:

  1. Initiate the password reset process by:
  • going to https://identity.education.govt.nz and click the 'Forgotten password' link, or
  • request your school's Delegated Authoriser to initiate the password reset process for your account, or
  • call the Education Service Desk
  1. Complete the password reset process by going to https://identity.education.govt.nz/ui/selfservice/home
  2. Once you have reset the password, you can then access your SMS with your new password.

FAQS for Machine Accounts

QuestionAnswer
Does a Machine Account Owner have to be an existing ESL user Yes, a Machine Account Owner must have their own ESL user account.
How does a user complete a machine account invitation? The machine account owner must log in to ESL Self Service using the Machine Account Owner's individual ESL user account (not the machine account) to set the password and complete the setup for the new machine account.
How does a user change a machine account password? The Machine account owner must log in to ESL Self Service using the Machine Account Owner's individual ESL user account (not the machine account) to change the password for the machine account.
Do machine account passwords expire? No
Can machine accounts become locked? No