Services

Directory services are available to students and employees, and include the Duke Internal Directory, which is populated by Duke's Lightweight Directory Access Protocol, or LDAP. 

In addition to directory services for programmers, we also offer a web-based page, LDAP Tools, for more complicated directory services.

To see and manage your own directory information, log in to Duke Account Self-Service.  

Experiencing problems with your directory information?  Be sure to review your Identity Sources report for any systems reporting incorrect information.

Academic collaborators, 3rd party contractors, and volunteers may need a Duke NetID and/or other services. 

Some affiliate accounts (such as pre-hire affiliates) are automated based on a system of record.  For other requests, please visit Sponsored Accounts.

NetIDs are usernames used for Duke students, employees, and guests to log in to Duke services.

Learn more at https://oit.duke.edu/what-we-do/applications/netid.

Duke OneLink is an alternative to NetID login, often used by applicants and alumni. 

Duke services desiring to accept OneLink authentication may opt in at Authentication Manager. 

Strong authentication requires more than a password.  Multi-factor authentication, or MFA, is used to protect your account from fraud.

Visit Duke's Multi-factor Authentication site to review your options for strong authentication, including Duke Unlock for one-touch, passwordless MFA.

For guidance on integrating 3rd party systems with Duke identity services, please see our guide on third-party service support.

Information on data feeds and other methods for accessing person data are outlined at Options for Retrieving Person Data.

Members of Group Manager Support Groups may request test or service accounts on the Sponsored Accounts site.

These accounts may be transferred to an individual owner, even if they are not a member of a support group.

Please see Options for Retrieving Person Data.

Most Duke accounts are created automatically through student and employee systems, or the Sponsored Accounts process.  Additional workflows for automated account creation are sometimes accommodated.

Please see authentication.oit.duke.edu for guidance on integrating a service with Duke's Shibboleth environment.

Options to integrate a Duke service with OAuth/OIDC as an alternative to SAML2 are outlined on authentication.oit.duke.edu.

Duke is a member of the InCommon Federation, which represents U.S.-based educational institutions within eduGAIN.

Through this community network, Duke NetIDs will automatically be accepted by any service providers who has been granted the Research & Scholarship designation.

Reference groups are lists of Duke populations curated by data owners and intended for consumption by Duke services and departments in lieu of ad hoc definitions.  For example, the Office of the University Registrar approves standard definitions for groups of undergraduate and graduate/professional students.

Policy groups are related to Duke services and often consume reference groups to define part or all of an access condition.  A policy group may combine or intersect several reference groups, and/or local inclusions or exclusions.

Options for accessing group data are outlined at Working with Grouper and Group Manager.