Central Authentication Service of CU (CAS) provides user authentication for university and faculty information systems as well as computer networks, primarily for our faculty in the following applications:

CAS Account

  • A CAS account is primarily created for students, staff, and external collaborators of faculties and other university units.
  • The user is assigned a person number (UKČO) and login (username). You can use this form to search for your login by UKČO.
  • It is mandatory for students and staff of our faculty to collect the university ID card 1, along with the card, a login and initial password are issued. The initial password is valid for only 5 days and is used exclusively for setting your own password (the so-called verified) 2.
  • External collaborators and PhD students of our faculty can use unverified passwords in case of long-term or permanent physical unavailability of distribution centers or authorized faculty offices.
  • We recommend users set a contact email address and phone number in CAS, see the Password section below.

CAS Integration with Faculty Information System and Computer Network

  • The faculty account is created for students, staff, external collaborators, and honorary faculty members.
  • Account activation occurs within 20 minutes after setting the password in CAS under the following conditions:
    • The user had a relationship with the faculty in the WhoIs and in CAS systems 3,
    • The user had been assigned a login in CAS 4,
    • The account in Google Apps, the faculty web portal account, and the web presentation management account are activated by 11:00 AM the next day after setting the password in CAS.
  • Unverified passwords are not accepted for faculty accounts!
  • The login is taken from CAS, and the domain part (e.g., /natur.cuni.cz) of the CAS login is suppressed. UKČO and email alias cannot be used for login.
  • The faculty account provides access primarily to:
    • Google Apps 5 (if you do not wish to use the activated faculty email account, it is recommended to forward incoming messages to your preferred account;
    • web portal,
    • Eduroam wireless network,
    • operating systems in computer labs and study rooms,
    • printing and copying system MyQ in libraries, computer labs, and study rooms (university ID required 6),
    • web presentation management,
    • setting up alias for faculty email accounts, for individuals not automatically assigned one.
  • After the expiration of relationships in the WhoIs system, the faculty account is canceled!
  • The university ID card can be used for access to faculty buildings and facilities.

Password

  • Password change is done after logging into the CAS web portal (http://cas.cuni.cz). In CAS, the change is reflected immediately, on the activated faculty account within 15 minutes, provided that the user had a relationship with the faculty in the WhoIs and in CAS 3 and that it was a setting of the verified CAS password.
  • The password must meet the following conditions:
    • it must be at least 8 characters long,
    • it can only contain the following characters, with at least one from each category:
      • lowercase English letters (a-z),
      • uppercase English letters (A-Z),
      • Arabic numerals (0-9),
      • selected non-alphanumeric characters (!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~ )
    • it must not contain part of the name, login, or email address (three consecutive characters are checked),
    • the first and last character of the password must not be a space,
    • the last 5 passwords must not be repeated.
  • The password is valid for 365 days.
  • A warning about the approaching expiration of the password in CAS is sent to the contact email address from CAS, which the user sets themselves.
  • If you have forgotten your password, or it has expired for a longer period 7, then usually a personal visit to an authorized faculty office or any distribution center is required to reset it. A university ID is required for identity verification, and distribution centers also accept identity cards.
  • You can avoid a personal visit if you have set a contact email address and phone number in CAS. In that case, follow the special CAS guide to setting a new password.
  • Employees (employment contract, agreement on work performance) and students (excluding doctoral students) are not allowed to change their password type to unverified.

Services

Notes

1 An employee for issuing a UK card is considered to be a person with a valid labor relationship (sometimes incorrectly referred to as an employment contract) or an agreement on work performance. A person with an agreement on work tasks or an external collaborator is not required to collect the card (they may request an external user card, but may receive the initial password even without the card in the distribution center).
2 The initial password is the password assigned after personal identity verification. After logging into CAS with the initial or verified password, the user can set their own password.
3 Users will also automatically receive the WhoIs system account with necessary settings.
4 CAS and login are processed with necessary authorization.
5 Google Apps account and email alias are created only for students, employees, and honorary members.
6 The university ID card is entered into MyQ within two days of the issuance of the card and activation of the faculty account.
7 A new password can also be obtained on the CAS web portal using a recently expired password, provided the password has not expired for more than 3 months and is not an initial password (assigned at the authorized faculty office or distribution center).