Upcoming Changes to Authentication

Introduction

In August 2025, the authentication method for Brightspace, Zoom, and Kaltura will be transitioning to Microsoft 365 authentication (Entra ID).  These changes aim to streamline access to educational tools and resources, ensuring a more efficient and secure environment.

Key Changes

1. Authenticate with Entra ID (Microsoft 365): All StarID users for D2L Brightspace, Zoom, and Mediaspace will now use Entra ID for single-sign on (SSO). This integration will improve security and facilitate access to other system such as Microsoft 365 and WorkDay.
2. Provisioning Rules: New provisioning rules will be implemented to ensure consistent access to educational services across the system.
3. Dual Roles: Accounts will be created for each role of a person: student or employee.  If an individual is both a student and employee, they will have two accounts within each service, in alignment with the Microsoft 365 environment.
4. Improved Security: All logins to D2L Brightspace, Zoom, and MediaSpace will now require multi-factor authentication (MFA), reducing the risk of compromised accounts.

Workflow Change

When signing in to Brightspace, Zoom, or Kaltura, you will see a different authentication screen after clicking log in or sign on.

Prior Authentication screen:

New Authentication Screen:

FAQ

Q: How will the authentication with Entra ID affect my login process?
A: The integration will simplify the login process by allowing you to use one credential for sign-on across Microsoft365, WorkDay, D2L Brightspace, Zoom, and Mediaspace. Students will log in with StarID@go.minnstate.edu, and employees will use StarID@minnstate.edu

Q: Will I be required to use Multi-Factor Authentication (MFA) ?
A: Yes, this will be similar to your experience logging in to Microsoft 365 services today.

Q. If I am both a student and employee, which account will my data be associated with?
A. The project team is researching the impact on individuals with dual roles.  Further information will be provided as we get closer to implementation.

Q: What do I need to do to prepare for this change?
A: At this time nothing is required.

Impacts

Dual Roles

An account will be created for each role a person has, in each of the three services.  For example: Jane Smith is a student and an employee at Hennepin Technical College.  Jane will have two accounts within Brightspace:

• Employee:  Jane Smith, aa1234aa@minnstate.edu, 01234567.e
• Student: Jane Smith, aa1234aa@go.minnstate.edu, 01234567

Data

The change of authentication will include changes to identifiers within the three services.  Any service or integration that relies on this information will need to be updated:

• D2L Brightspace
  • UserNames will be updated to a User Principal Name (UPN). 
    • Students: StarID@go.minnstate.edu
    • Employees: StarID@minnstate.edu
  • Employee TechID's will be updated to include a '.e'.  For example: 0123457 will become 01234567.e
• Zoom
  • Email addresses will be updated to the User Principal Name (UPN).  Example: 'Jane.Smith@school.edu' will become 'aa1234aa@minnstate.edu'
• Kaltura Mediaspace
  • UserName will be will be updated to a User Principal Name (UPN).  Example: 'aa1234aa' will become 'aa1234aa@minnstate.edu'