How To's

Follow the steps below to get started.

1. On the Hostos Home Page > Click on Login To > Click on either Single Sign On (SSO)
   
2. Enter your Hostos email address > Click on Continue
   
   NOTE: Hostos email address format shown below.
   • Faculty/Staff: jdoe@hostos.cuny.edu
   • Students: jdoe4321@stu.hostos.cuny.edu
3. Click on Begin Setup to start the process
   
4. On the Select Authentication Factor screen, click the OneLogin Security Questions option
   
   NOTE: We strongly recommend setting up 'OneLogin Security Questions' as the first choice as security questions are mandatory. Others are listed below.
5. Select your Security Question. Click on the Security question (Your choice) from the list provided
   
6. Type out your answer that corresponds to the question you chose in the previous screen. Click on Continue
   
7. Repeat steps 5 and 6 for Questions 2 and 3. Pick different questions and provide different answers.
8. Click on Accept to agree to the terms and conditions of the CUNY policy of acceptable use of Computer Resources
   
9. You are now logged in! You may be prompted to Add OneLogin Extension to your browser
   

Applications show up as tiles and are grouped into Hostos Applications and CUNY Applications.

Clicking on any tile opens the site. (CUNY applications will require a one-time set up.)

All in one click - Hostos Single Sign On!

Applications that use your Hostos User name and Hostos password are listed under Hostos Applications.

Email address always follows a standard format for all Hostos users. It is also based on role (students, faculty/staff).

Student email is made up from 4 parts

1. First 1 character of First name +
2. First 4 characters of Last name +
3. Last 4 numbers of the EMPL ID +
4. @stu.hostos.cuny.edu

Example: FLAST0000@stu.hostos.cuny.edu, JDOE4321@stu.hostos.cuny.edu, DPRIN1379@stu.hostos.cuny.edu, CKENT6899@stu.hostos.cuny.edu

Faculty and Staff is made up from 3 parts

1. First 1 character of First name +
2. Last name in full +
3. @hostos.cuny.edu

Example: FLAST@hostos.cuny.edu, JDOE@hostos.cuny.edu, DPRINCE@hostos.cuny.edu, CKENT@hostos.cuny.edu

An example of an Hostos Application is shown below (All Hostos apps behave similarly).

NOTE: Apps shown are for illustration only.

1. Click on the Apps List: Everything. A drop-down menu appears
   
   NOTE: The App list menu can appear differently based on the page where you are.
2. Click on Hostos Applications
   
3. Only Hostos Applications are displayed. Click on the app tile of choice
   
   
4. A new tab (or window) appears and you are logged in. All in One click!
   
   

Applications that can be accessed with your CUNY user name and password are listed under CUNY Applications.

These apps will require a simple one-time setup for the first time (i.e. each app will need a separate one-time setup).

Users need to enter their CUNY Login Username and password one time. Once this is done, clicking on the app, opens the site and logs you in. All in one click!

Few things to keep in mind

• CUNY Login Username is in the format: Firstname.LastnameNN@login.cuny.edu, where “NN” is the last 2 digits of your CUNY EMPLID
• Each App will need a separate one time set up.
• When Password changes are made, again each app must be updated. Refer to the "Updating a CUNY Application Password" section for this.

1. Click on Apps List. A menu appears
   
2. Click on CUNY Applications
   
3. All CUNY applications that are available to you appear here. Click on the application of choice
   
   NOTE: The experience is similar to shown for all other CUNY apps.
4. Provide your information here. Enter your CUNY Login UserName > Enter your Password > Click on Save
   
5. You are returned to the CUNY Applications page. The app is now ready. Click the app you just configured
   
6. A new tab (or window) appears and you are logged in. All in one click!
   

If you update your CUNYfirst password it MUST BE updated here.

After you update your password in CUNYfirst, you must update this information within the Hostos SSO by going to the CUNY applications and updating it in the app as well. Failure to do this will result in failed CUNY log in attempt the next time you click on the tile.

See steps below to update a password on a CUNY application.

1. Navigate to CUNY Applications page. Locate the app you would like to update. Place your cursor on the app tile [DO NOT click on it]. An Edit icon appears. Click on Edit
   
2. Notice this page displays your User name & Password fields. Click in the password field and update the password with the new CUNYfirst password. Click on Save. App is ready for use
   

Always log out of the system when done. Good security practice is to log out of a site when finished.

NOTE: Closing a window does not log you out of a site.

1. Click on Your Name as shown. A menu appears. Click on Log Out
   
2. Once signed out you will be redirected to the Hostos Home Page
   

A browser extension adds additional functionality to your browser. The OneLogin browser extension provides quick way to access all apps within your favorite browser.

A single-click access to both Hostos Applications and CUNY Applications!

On campus Hostos desktops – No! Hostos Information Technology has you covered.

Off campus & personal computers – Installing it gives you the same single click experience within your favorite browser. Extensions are available for most popular browsers such as Google Chrome, Mozilla Firefox, Safari, Microsoft Edge.

Note: Extension is not installed automatically on Hostos Laptops. It must be done manually as shown below.

Steps below show you how to add the Browser Extension.

1. Click on Add OneLogin extension
   
   NOTE: If you chose to SKIP, you can do this any later time.
2. The browser extension download page opens. Click on Get
   
   NOTE: Shown on Microsoft Edge. Your experience may vary slightly on Google chrome, Firefox, Safari, etc.
   Browser extension is not compatible with mobile browser.
3. If prompted, click on Add extension as shown
   
4. The download progress indicator will indicate that it is being downloaded
   
5. When done, a message will notify you that the extension has been added. Close this message
   
6. The Browser extension button now appears as shown. It is now ready for use
   

If you would like to add a Browser Extension follow steps below.

1. Click on Your Name. Click on Profile
   
2. Click on Browser Extension. Click on Install (Install appears only if the extension is not installed)
   
3. You will be taken to the App Extension page. Click on Get. Proceed to install the Extension
   
4. When the installation is complete the icon will appear as shown
   

The below demonstrates what appears when you click on the Browser extension depending on whether you are logged in or not.

If you are not signed in, you will be prompted to Log in.

1. When you ARE NOT signed in: Click on the extension icon. Prompts you to log in as shown
   
2. When you ARE signed in: Click on extension icon. All apps are visible directly as shown
   

Additional security factors such as the Authenticator App or the OneLogin Protect can be added at any time. However, keep in mind both will require you to have an internet connected smartphone with the app installed for it to work.

You also have a choice to change the primary factor if you wish to at any time.

• Authenticator App – An Authenticator app such as 'Google authenticator' or 'Microsoft Authenticator' can be added as an additional security factor.
  • Google Authenticator app
  • Microsoft Authenticator app
• OneLogin Protect – Similar to above, OneLogin too offers its own authenticator app that can be added as an additional security factor.
  • OneLogin Protect app

All above mentioned apps are optional.

1. Click on Your Name. A drop down appears. Click on Profile
   
2. Click on Security Factors on the menu on left as shown
   
3. Click on Add Factor
   
4. You will be prompted to Select Security Factor window as shown. Next go to appropriate section below based on your choice
   

1. Click on OneLogin Protect
   
2. When prompted as shown, Switch to your smartphone. On your smartphone, download and open the 'Onelogin Protect' app. Switch back from phone. Click on Activate
   
3. A QR Code appears
   
4. Switch to your phone for the following steps
   1. Open the OneLogin Protect app
   2. Tap to add an account
   3. IF prompted, allow the app access to the camera
   4. Scan the QR Code displayed on your computer screen
   
5. A success message appears on top as shown. Also, OneLogin Protect appears in your list
   

1. Click on Authenticator App
   
2. When prompted with the QR Code window, Open your preferred authenticator app on your smartphone. Add New. Scan the QR Code to add the new site
   
3. The new site appears along with a code (on your phone) within the Authenticator app. Enter the Authenticator code provided into the form as shown. Click on Continue
   
4. A success message is displayed and the Authenticator App shows up in your list. This indicates that the setup is now complete
   

1. Click on Your Name. Click on Profile
   
2. Click on Security Factors
   
3. Click on the three dots beside the Security Factor you would like to choose to set as a Primary
   
4. A menu appears. Click on Set as Primary
   
5. The confirmation message is displayed on top as shown. Also, the change in primary is reflected in the list shown
   

If you need to remove any authentication factors from your Hostos SSO profile, you may do so by following these instructions. One of the most common scenarios requiring these steps is if you have set up an Authenticator App on a mobile device and no longer have access to it and need to set up a new one.

1. Go to your Hostos SSO Profile by clicking on your username and selecting Profile from the drop-down menu
   
2. In your Hostos SSO profile, click on Security Factors
   
3. In the Security Factors page, click on the three dots next to the factor you wish to remove and select Remove from the drop-down menu
   
   
   Confirm that you want to remove the selected Security Factor and click Remove
   

Please note the following:

• If you try to remove a Security Factor that is currently your primary factor, you will receive the following prompt to select a new primary factor. Clicking on any displayed factors will make that one the primary and remove the factor that you had originally selected to remove.
  
• If you only have one Security Factor, in this case the OneLogin Security Questions, you will see the following message:
  
• You cannot remove the Security Factor if it is the only one you have configured. You will need to click on "Enroll New Primary Factor" and add an additional factor accordingly.
• If you are looking to change your OneLogin Security Questions and do not have access to any additional Security Factor, you will need to contact the IT Service Desk or submit an IT Job Request for assistance.
• If you have multiple Security Factors and remove the OneLogin Security Questions, it will be allowed. But the next time you log into Hostos SSO, you will be prompted to set up Security Questions before you can continue.

Self Service Password Management using Hostos SSO requires you to have completed the initial setup. If you have not done so, please refer to "How do I access my Hostos Single Sign On? (First Time User Experience)" for initial setup instructions.

The following instructions apply to resetting/unlocking your Hostos credentials (@hostos.cuny.edu / @stu.hostos.cuny.edu) and not your CUNYfirst or CUNY Login (@login.cuny.edu) credentials. You can reset your CUNYfirst or CUNY Login account credentials on the CUNY website or by clicking on this link.

1. On the Hostos SSO Login page, click on the "Forgot Password" link
   
2. On the "Reset Your Password" screen, enter your Hostos e-mail address and click on the Continue button
   
   
   Please Note: If you require assistance looking up your Hostos e-mail address, you can click on the "Need Login Help?" link to see your options for assistance, which include using the account lookup tool or contacting the Service Desk.
   
   If your account is currently locked, you will receive an "Access Denied" message indicating that you are not allowed to reset your password. You will not be able to reset your password until the account lock is removed. You can either unlock your account first (see instructions below) and proceed with the password reset, or contact the Service Desk for assistance.
3. Complete the reCAPTCHA to proceed
   
4. If you have already configured your Hostos SSO access, you will see the following screen to select an authentication factor. Proceed through this authentication prompt by selecting one of the authentication factors that you have set up
   
   
   Please Note: If you have not set up your Hostos SSO access yet, you will be prompted with the following error message saying "Access Denied" You must have set up your account in Hostos SSO to be able to reset your password. Please reference "How do I access my Hostos Single Sign On? (First Time User Experience)" for step-by-step instructions.
   
   
5. On the "Change Password" screen, you will select your new password. As you enter it, the required conditions will have a green checkmark placed next to them. Your new password must satisfy each of the conditions shown, otherwise it won’t be accepted and the Submit button will remain grayed out
   
6. After you click on the Submit button, if the password change has been accepted, you will see a green message indicating that your password has been updated and you can proceed to login in with the new password.
   
   If the password is not accepted, you will get an error message in red giving the reason why it was rejected. The following are sample screenshots.
   
   If the new password is accepted:
   
   
   If the new password is rejected:
   

Unlocking your Account

After repeated login attempts with an incorrect password, your Hostos account will automatically be locked. For security reasons, this lockout will last for a period of 20 minutes, after which the lock is automatically removed. Instead of waiting, you can perform a self-service account unlock by proceeding through the following steps. As with the password reset, you must have already configured your account with Hostos SSO before being able to use Self Service Password Management.

1. If your Hostos account is locked, you will get the following message when you attempt to log into Hostos SSO. Click on the Unlock Account button to continue
   
2. Complete the reCAPTCHA to proceed
   
3. Select an Authentication Factor
   
   
   Please Note: if you have only set up security questions, you will not have the option to use an Authenticator app or the OneLogin Protect app for this step. If you have forgotten your security questions, lost access to the authenticator app, or you have not set up your account to use Hostos SSO, you will need to contact the Service Desk for assistance.
4. Once you have successfully authenticated using one of the available authentication factors, your account will be unlocked and you will see a notice indicating that your account has been unlocked