Enterprise Digital Credentials at Virginia Tech
Enterprise Authenticator Types
- Memorized Secrets
- Look-up Secrets
- Out-of-Band Devices
- Single-Factor OTP Device
- Multi-Factor OTP Devices
- Single-Factor Cryptographic Software
- Single-Factor Cryptographic Devices
- Multi-Factor Cryptographic Software
- Multi-Factor Cryptographic Devices
- Device/Token Credential
- Biographic Digital Credential
- Cryptographic Digital Credential
Enterprise Authenticator Types and Credentials
| Authenticator Type |
Issued/Managed by |
Type |
Sub-Type |
Credential |
| Identifier and Secret |
Virginia Tech |
VT Usernames |
Constituent |
PID |
| Sponsored PID |
| Network Account |
| External Identifier |
Affiliate |
Guest Account |
| Network Guest Account |
| External |
InCommon Federation |
Federated |
| Device/Token |
External |
OTP |
Constituent/Affiliate |
|
| |
|
| Biographical |
External |
Device-Based |
Fingerprint |
| Cryptographic |
Virginia Tech |
X509 Certificates |
PDC |
| External |
Security Keys |
Security Keys (e.g. Yubikey) |
| Personally/Device Created |
FIDO2/WebAuthn |
Virginia Tech Managed Enterprise Credential Procedures: Eligibility & Naming
| Credential |
Managed by |
Population |
Eligibility |
Begin |
End |
Naming Standard |
| PID |
Secure Identity Services |
Employee |
Pre-Hire, Active, Recent |
|
|
User-defined |
| |
Retiree |
|
|
|
|
| |
Student |
|
|
|
|
| |
Alum |
|
|
|
|
| |
Affiliate |
|
|
|
|
| Sponsored PID |
|
Affiliate |
|
|
|
|
| Guest Account |
|
Applicant/Admit |
Current Applicant/Admit |
|
|
External email based: username@domain |
| |
Affiliate |
Any |
|
|
|
| Hokies ID |
CCS |
Employee & Student |
|
|
|
|
| Other Identifier & Secret |
|
Varies |
|
|
|
PID@domain |
