myPass Overview

myPass is a software application that is managed by Alberta Education and made available to Students, Parent/Guardian(s) and Authorized Users. The purpose of this document is to provide an overview of the security controls implemented within myPass and how PASIprep and Alberta Education’s Web Guard System support myPass security.

There are two user groups that access myPass:

Ministry Users	This mode allows a PASIprep user with PASIprep Level 21 Permission - Access Student via myPass to access a student via myPass without the need to have an explicit myPass Connections with the student. This mode can only be accessed by first finding the student in PASIprep and then using PASIprep functionality to view the student in myPass.
Public Users	This mode allows any user with an Education Account to access myPass. The myPass user will only be able to view students that they have a myPass Connection with.

Ministry Users

A Ministry user can access virtually all of the pages that public users will see, and are only restricted from using the online payment system, viewing student messages, or adding student connections. Any actual 'admin' function, such as creating messages for students, is completed via the appropriate PASIprep screens, based on the user having the appropriate page permissions.

Which Students Can Be Accessed

If the PASIprep user is able to view the Student Profile for the student and they have the PASIprep Level 21 Permission - Access Student via myPass, then the PASIprep user will be able to access the student in myPass.

Note: If the student's ASN is secondary or their ASN is deactivated, the PASIprep user is not permitted to view them in myPass even if they have access to them in PASIprep.

Public Users

In order for an Education Account to have access to view a student’s information, the account must be formally connected to the student (via a myPass Connections). A myPass Connections record is created for this.

Which Students Can Be Accessed

A myPass Connection Connection Status = Active is required for the Education Account to gain access to the student's information via myPass.

Education Accounts

myPass is secured by using Education Account that are managed by Alberta Education’s Web Guard System.

Every time a person tries to access myPass, the request is intercepted by Web Guard and the user is asked to log in using their Education Account if they have not logged in yet. Once a user logs in successfully into myPass, PASI does the email synchronization and cleanup. refer to Login to myPass for further details around this functionality.

Web Guard does provide the option for a person to create a new Education Account if they do not have one yet. The person’s email address is validated and then their Education Account is available to be used.

The following are the addition details:

An Education Account can only establish one Student (myPass Connection Type). ¹⁾
An Education Account can only connect to student once. ²⁾
An Education account can establish any of the following myPass Connection Type. This can be any of the following:

The following diagram illustrates the different myPass connections an Education account can establish to access the student information in PASI:

mypass_student_access_diagram.vsd

Authentication Patterns

A user (Student, Parent/Guardian, or an Authorized User) is able to signup on myPass to gain access to the student's information.

The following are authentication patterns available to each user type to establish a successful myPass connection:

myPass Connection Type	Email Match	Signup Access Code Match
Students (13 years or older)³⁾	Yes	YES
Parent/Guardians	Yes	No
Authorized Users	YES ⁴⁾

Please note: If a user exceeded the maximum number of attempts permitted to establish their connection, their Education Account has to serve a lock-out period. ⁵⁾

Related Wiki Pages

Business Objects	myPass Functionality
Authorized User Authorized User Audit Event Education Account myPass Connection myPass Connection Audit Event Signup Code	Accept myPass Terms of Use Agreement Accept/Decline Terms of Use (myPass) Add an Authorized User Change Mailing Address Change Phone Number Confirm Diploma Exam Registration Screen Confirm Reprint Credential Order Screen Connect to a Student Create myPass Connection Create Rescore Request - Public (myPass) Create Rescore Request - Step 1 Create Rescore Request - Step 2 Create Rescore Request - Step 3 Create Rescore Request - Step 4 DER Sign-Up Letter Processor DER Signup Letter Processing Agent Edit Authorized User Edit Exam Writing Location and Language Edit Transcript Order Item Enter Billing Information (Exam Registration Request) Entering Billing Information (Transcript Order) Entering Diploma Exam Registration Information Generate Signup Access Code Generate Verification Document Home Education History Login to myPass myPass - Entering a Document Order Item Address myPass - Ordered Document Item Detail Panels - Functions Visibility myPass DER Signup Email myPass Exam Registration Request Security Modes myPass Homepage myPass Messages myPass Terms of Use Agreement myPass Welcome Page New Transcript Order Item Screen Notification of Home Education Notification Preferences Obtain a Detailed Academic Report (myPass) Obtain Access to the Student Information via myPass Order a Transcript Ordering a Credential Reprint Paying Through EPS (Exam Registration Request) Paying Through EPS (Transcript Order) Payment Through EPS (Rescore Request) Register for a Diploma Exam Reprint Credential Screen Request a Signup Access Code Resuming a Registration Request that has not been registered Resuming a Rescore Request in Payment Pending Review My Request Screen Review My Transcript Order Screen Select Student for Credential Order Screen Select Student for Exam Registration Request Select Student for Transcript Order Self Service Signup Letter Processing Agent Signup Access Code Successfully Requested Student Selector Transcript Order Confirmation Transcript Order Student Panel Transcript Reorder Panel View Credential Details (myPass) View Credentials View Diploma Exam Registrations and Results View Document Order History View PAT Results (myPass) View Personal Information View Rescore Request
Business Process Models
Add an Authorized User (Business Process) Create Credential Re-Print Order (Manual) Manage myPass Connections in PASIprep (Business Process) Manage myPass Connections via myPass (Business Process) Manage myPass Letter Order Items Manage myPass Transcript Order Items myPass Signup (Business Process) Order a Transcript Online Request a Signup Access Code via myPass (Business Process) View Student Information (myPass)
Terminology
Accessibility Education Account EPS2 (Electronic Payment System) FOIP (Personal Information Management) myPass Connections myPass DER Signup Email myPass DER Signup Letter myPass Message Self-Connection Signup Access Code
Core Processes
DER Sign-Up Letter Processor DER Signup Letter Processing Agent Self Service Signup Letter Processing Agent
PASI Core and Internal Services
Create myPass Connection Generate Signup Access Code Submit Authorized User Update myPass Connection
Documents	Data Access rules
DER Signup Letter (PDF) Self Service Signup Letter (PDF)	myPass Connection
PASIprep Functionality	PASIprep Permissions
View myPass Connection View Student - myPass Connections Tab View Student - Student Information Access Tab	PASIprep Level 21 Permission - Access Student via myPass PASIprep Level 33 Permission - Manage Diploma Exam Registration with fees PASIprep Level 36 Permission - Manage myPass Settings

myPass, Concept, myPass

¹⁾

Implemented with Rule 60078 - Education Account has a 'Self' Connection.

²⁾

Implemented with Rule 60081 - Education Account is connected to the Student.

³⁾

Student under 13 years of age are not permitted to gain myPass access.

⁴⁾

Authorized users myPass connection can only be established if both the Email and the Signup Access code are a match.

⁵⁾

This is implemented with Rule 60085 - Connection Request Exceeds number of Attempts Allowed.

PASI Knowledge Base

Table of Contents

myPass Overview

Ministry Users

Which Students Can Be Accessed

Public Users

Which Students Can Be Accessed

Education Accounts

Authentication Patterns

Related Wiki Pages