CUNY Login FAQs

What are my CUNY Login account credentials (username and password)?

If you are a CUNY student and/or employee, your CUNY Login account username will be in the format [email protected], where “NN” is the last 2+ digits of your CUNY EMPLID. If you are a guest user, your CUNY Login account username will be the one you set in the CUNY Portal.

Most students will be prompted to claim/activate their CUNY Login account and set a password as part of the online student application process; most employees as part of the new-hire onboarding process. If you have not set the password for your CUNY Login account, you can use the New User link at the bottom of the CUNY Login page.

What is an EMPLID?

EMPLID is the unique CUNY identification number assigned to every student, faculty and staff member in CUNYfirst.

What CUNY applications use the CUNY Login credentials?

See the Applications using CUNY Login tab for the current list of applications that use the CUNY Login credentials.

Are CUNY Login credentials only used on the CUNY Login page?

No, not all applications are compatible with the CUNY Login service. Some applications use a different login service with a different login page and are not single sign-on (SSO) enabled, but still use the CUNY Login credentials so users do not have to remember a separate set of credentials.

See the Applications using CUNY Login tab for the current list of applications using the CUNY Login credentials.

Why does the CUNY Login require “@login.cuny.edu”?

Adding “@login.cuny.edu” to the CUNYfirst username provides the simplest username format to satisfy the broadest user authentication and access control requirements for University and third-party hosted applications.

To simplify the user experience for the CUNY Login page, “@login.cuny.edu” is prepopulated.

What is single sign-on (SSO)?

Single sign-on/out (SSO) lets you enter a single username and password once to access more than one application without having to log in or out of each one separately. For example, if you are already logged in to Blackboard, clicking on a link to DegreeWorks will automatically open DegreeWorks. Conversely, when you log out of one single sign-on enabled application, you log out of ALL currently active single sign-on enabled applications.

What applications currently support single sign-on using the CUNY Login credentials?

See the Applications using CUNY Login tab for the applications that are single sign-on/out (SSO) enabled using the CUNY Login credentials.

How do I log out of one single sign-on enabled application without logging out of all of them?

If you need to independently log in and out of single sign-on/off (SSO) enabled applications, you must open the applications in separate private browser windows, in different browsers or on different devices.

Why can’t I bookmark the new CUNY Login page?

If you access the CUNY Login page directly, such as via a bookmark or by manually entering the page URL into your browser address bar, you will see an error page because the service will not know which application you are trying to access. Although a bookmark to the CUNY Login page will not work, you can bookmark the link used to open the CUNY Login page for a specific application.

How long can an application remain idle before it times out for inactivity?

Inactivity timeouts vary by application. To avoid timing out of an application, you can reset its inactivity timer by returning to the application and refreshing a page or clicking on a link before reaching the timeout limit.

See the Applications using CUNY Login tab for the inactivity timeouts for applications using the CUNY Login credentials.

What happens to my work if I am logged out my application due to an inactivity timeout?

It depends on the behavior of the application and the specific user interface withing that application. Following an inactivity timeout, the login page displays the next time you refresh a page or click on a link in the application. After logging back in, you may see the result of the action that triggered the login page—either a refreshed page or the link’s destination.

What are the differences between an inactivity timeout and logging out of an application?

An application’s inactivity timeout logs you out of that application only—all other active single sign-on/out (SSO) enabled applications remain active.

Logging out of an application that is SSO enabled logs you out of all active single sign-on enabled applications using the same browser.

Logging out of an application that is not SSO enabled logs you out of that application only.

What are the CUNY Login credentials for users without a CUNYfirst account?

These “guest account” users should append “@login.cuny.edu” to their CUNY Portal username and use their CUNY Portal password when presented with the CUNY Login page.

To simplify the user experience for the CUNY Login page, “@login.cuny.edu” is prepopulated for all users.

How many failed login attempts does CUNY Login allow?

The CUNY Login page locks an account after five failed login attempts. Once the account is locked, you are prevented from accessing ALL applications and services using the CUNY Login page. The account lockout period is 60 minutes after which you can attempt to log in again.

Consider using the “Forgot Password” function after the fourth failed attempt to log in.

What documentation is available for CUNY Login?

CUNY Login documentation is available at What CUNY Login Documentation is Available? on this web site.

How do I change my CUNY Login account information?

You can access the the CUNY Login account self-service functions to change your CUNY Login account password, email address, telephone number and security questions by entering the URL https://managelogin.cuny.edu in a web browser or by clicking on Edit Your Account in the CUNY Login window.

Does my CUNY Login account management email address have to match my CUNY email address?

CUNY Login initially populates your account management email address with one already on file for you in CUNYfirst, but you can replace it with another email address.  

Note that your CUNY Login account management email address is maintained independent of your email addresses in CUNYfirst—changes to your CUNY Login account management email address do not update your email addresses in CUNYfirst and vice versa.