Social login lets you use an account you already have (such as Facebook, LinkedIn, or others) to log in to a service that normally requires its own account. Many popular apps and websites offer social login. Benefits include:
- If you don't already have an account for the service, you don't have to create one—and remember yet another password.
- Even if you do have an account specifically for the service, you might find it easier to use a more familiar account with a password you remember.
Two university units have begun using social login for specific services, and ITS is working with a small number of units that are considering implementation. IT staff who want to consider use of social login can learn more at Implementing Social Login for U-M Services.
How Social Login Works
Use of social login at U-M could allow people who do not have a uniqname and UMICH (Level-1) password to log in to a particular U-M website or service using a social account instead. It could also allow alumni and others to choose to log in with a social account instead of their U-M account.
- When you log in to a service that allows social login, you have the option to choose an account to use from a list of authorized options. The U-M unit or department providing the service decides which social accounts to authorize. You can choose different accounts each time you log in if you wish.
- You select the social account you want to use and are prompted for that account's password to log in.
- A third-party social login vendor (Cirrus Identity) manages the verification. Essentially, it takes your account's assurance that you are who you say you are and lets U-M know it is okay to give you access to the U-M site or service.
- Social login is enabled on a per-service basis at the discretion of the U-M unit or department providing the service. It is not appropriate for services where sensitive university data is stored or maintained.
- Social login only gives you access to the specific service you are logging into. It is different from using a uniqname, which gives you access to multiple U-M services.
Protecting Your Personal Information
Different social accounts send different information. Different social account providers may send different identity information (for example, name, email address) to our third-party social login vendor when you use a social account to log in to a U-M site or service. Each social account provider has its own policies about what minimal information is sent and its own procedure for notifying you and asking for consent to share the information. Information sent to our third-party social login vendor will only be used for the purpose of providing access.
U-M receives only what's needed. U-M follows the best practice of accepting and storing only the minimal information needed to provide you with access to the website or service. We have arranged for our third-party vendor to send the university nothing more than your first and last name and email address, along with assurance that you are who you say you are.
Need to unlink your social account? If you linked your social account to U-M for a particular service by verifying your identity or logging in with your uniqname when you first logged in to that service, you may want to unlink it when you no longer need the service. You can request that the account be unlinked by contacting the ITS Service Center.
Manage your social media privacy. For your personal social media accounts, choose appropriate privacy settings and follow social media privacy best practices.