Services Account Frequently Asked Questions
Intended for:
Services account users.
Scenario/Use case:
This article provides answers to common questions regarding Services account.
FAQ:
What is a "Services Account?"
A "Services Account" enables you to access a number of important applications at Fermilab with a single username/password. Applications now available via the "Services Account" are: Email, Instant Messaging, FermiDash, SharePoint, Fermilab Time and Labor Reporting (FTL), Redmine, Service Desk, and VPN.
How do I get a Services Account?
Everyone who is a Fermilab user gets a Services account automatically. Your username is the same as your Fermilab email username. There is nothing special you have to do to get the account. However, you do need to get your initial password.
If you don’t have a Services account and you are a new Fermilab user (persons affiliated with a FNAL experiment, not employed by FNAL) you will need to request a Visitor ID and computer accounts using this form.
How do I get my Services Account password?
- To get your initial Services Account password, a user must first contact the Service Desk to get issued a first-time default password. You can call the Service Desk at any time to reset your password.
- We recommend you prepare to use the Password Reset Tool so that you can conveniently change your password, now and at any point in the future, 24x7. NOTE: You must wait 2 days before you actually change your password using the Password Reset Tool.
To use the Password Reset Tool, you must...
- Obtain and use an appropriate authentication mechanism - See instructions to obtain
- Enroll in the Password Reset Tool - See instructions to enroll
- Obtain and use an appropriate authentication mechanism - See instructions to obtain
- Once you have your authentication mechanism and are enrolled, you can use your first-time default password to enroll your Services Account using the Password Reset Tool by following these instructions.
If you encounter issues changing your password, please contact the Service Desk at (630) 840-2345.
Note: Your Services Account password should be different from your other passwords.
Why do I need a Services Account when I already have a Kerberos Account | Windows Account | Kerberos Certificate?
The majority of web applications used at the laboratory have moved to using either LDAP or Federation for authentication rather than the certificates. (Those that still accept certificates require certificates from the CILogon certificate authority.) The LDAP and Federation services use the SERVICES account for authentication, allowing you to maintain a single username and password for these applications.
When do I need to use my Services Account?
You can use your Services Account any time you access the following applications:
- Fermilab Email (also requires an RSA token)
- Fermilab Instant Messaging
- Fermilab Service Desk
- Fermilab Time and Labor Reporting (FTL)
- Fermilab SharePoint
- Fermi Redmine
- VPN (also requires an RSA token)
- FermiDash (also requires an RSA token)
More applications will be added in time.
See Also:
- Password requirements for Services account, Kerberos password, and FERMI domain (Windows login) password
- How to change your Services account password and FERMI domain (Windows login) password