How To's

Hostos Single Sign On banner

Hostos Single Sign-On provides a secure, simple single-click access to various applications that are used by members of Hostos Community College.

It is powered by a platform called OneLogin.

Hostos Single Sign-On gives you access to both Hostos and CUNY applications!

How do I access my Hostos Single Sign On? (First Time User Experience)

Follow the steps below to get started.

  1. On the Hostos Home Page > Click on Login To > Click on either Single Sign On (SSO)
    Snip image for the Login button on the Hostos Home Page
  2. Enter your Hostos email address > Click on Continue
    Snip image for Step 2: Enter your Hostos email address > Click on Continue
    NOTE: Hostos email address format shown below.
    • Faculty/Staff: jdoe@hostos.cuny.edu
    • Students: jdoe4321@stu.hostos.cuny.edu
  3. Click on Begin Setup to start the process
    Snip image for Step 3: > Click on Begin Setup to start the process
  4. On the Select Authentication Factor screen, click the OneLogin Security Questions option
    Snip image for Step 4: On the Select Authentication Factor screen, click the OneLogin Security Questions option
    NOTE: We strongly recommend setting up 'OneLogin Security Questions' as the first choice as security questions are mandatory. Others are listed below.
  5. Select your Security Question. Click on the Security question (Your choice) from the list provided
    Snip image for Step 5: Click on the Security question (of your choice) from the list provided
  6. Type out your answer that corresponds to the question you chose in the previous screen. Click on Continue
    Snip image for Step 6: Type out your answer then click on Continue
  7. Repeat steps 5 and 6 for Questions 2 and 3. Pick different questions and provide different answers.
  8. Click on Accept to agree to the terms and conditions of the CUNY policy of acceptable use of Computer Resources
    Snip image for Step 8: Click on Accept to agree to the terms and conditions
  9. You are now logged in! You may be prompted to Add OneLogin Extension to your browser
    Snip image for Step 9: You will be logged in and prompted to  Add OneLogIn Extension  to your browser
Accessing Applications

Applications show up as tiles and are grouped into Hostos Applications and CUNY Applications.

Clicking on any tile opens the site. (CUNY applications will require a one-time set up.)

All in one click - Hostos Single Sign On!

Hostos Applications

Applications that use your Hostos User name and Hostos password are listed under Hostos Applications.

Email address always follows a standard format for all Hostos users. It is also based on role (students, faculty/staff).

Student email is made up from 4 parts

  1. First 1 character of First name +
  2. First 4 characters of Last name +
  3. Last 4 numbers of the EMPL ID +
  4. @stu.hostos.cuny.edu

Example: FLAST0000@stu.hostos.cuny.edu, JDOE4321@stu.hostos.cuny.edu, DPRIN1379@stu.hostos.cuny.edu, CKENT6899@stu.hostos.cuny.edu

Faculty and Staff is made up from 3 parts

  1. First 1 character of First name +
  2. Last name in full +
  3. @hostos.cuny.edu

Example: FLAST@hostos.cuny.edu, JDOE@hostos.cuny.edu, DPRINCE@hostos.cuny.edu, CKENT@hostos.cuny.edu

An example of an Hostos Application is shown below (All Hostos apps behave similarly).

NOTE: Apps shown are for illustration only.

  1. Click on the Apps List: Everything. A drop-down menu appears
    Snip image for Step 1: Click on the Apps List: Everything
    NOTE: The App list menu can appear differently based on the page where you are.
  2. Click on Hostos Applications
    Snip image for Step 2: Click on Hostos Applications
  3. Only Hostos Applications are displayed. Click on the app tile of choice

    Snip image for Step 3: Click on the app tile of choice
  4. A new tab (or window) appears and you are logged in. All in One click!

    Snip image for Step 4: A new tab (or window) appears and you are logged in
CUNY Applications

Applications that can be accessed with your CUNY user name and password are listed under CUNY Applications.

These apps will require a simple one-time setup for the first time (i.e. each app will need a separate one-time setup).

Users need to enter their CUNY Login Username and password one time. Once this is done, clicking on the app, opens the site and logs you in. All in one click!

Few things to keep in mind
  • CUNY Login Username is in the format: Firstname.LastnameNN@login.cuny.edu, where “NN” is the last 2 digits of your CUNY EMPLID
  • Each App will need a separate one time set up.
  • When Password changes are made, again each app must be updated. Refer to the "Updating a CUNY Application Password" section for this.
  1. Click on Apps List. A menu appears
    Snip image for Step 1: Click on Apps List
  2. Click on CUNY Applications
    Snip image for Step 2: Click on CUNY Applications
  3. All CUNY applications that are available to you appear here. Click on the application of choice
    Snip image for Step 3: Click on the application of choice
    NOTE: The experience is similar to shown for all other CUNY apps.
  4. Provide your information here. Enter your CUNY Login UserName > Enter your Password > Click on Save
    Snip image for Step 4: Enter your UserName > Enter your Password > Click on Save
  5. You are returned to the CUNY Applications page. The app is now ready. Click the app you just configured
    Snip image for Step 5: Click the app you just configured
  6. A new tab (or window) appears and you are logged in. All in one click!
    Snip image for Step 5: A new tab or window appears and you are logged in
Updating a CUNY application password

If you update your CUNYfirst password it MUST BE updated here.

After you update your password in CUNYfirst, you must update this information within the Hostos SSO by going to the CUNY applications and updating it in the app as well. Failure to do this will result in failed CUNY log in attempt the next time you click on the tile.

See steps below to update a password on a CUNY application.

  1. Navigate to CUNY Applications page. Locate the app you would like to update. Place your cursor on the app tile [DO NOT click on it]. An Edit icon appears. Click on Edit
    Snip image for Step 1: Navigate to CUNY applications page
  2. Notice this page displays your User name & Password fields. Click in the password field and update the password with the new CUNYfirst password. Click on Save. App is ready for use
    Snip image for Step 1: Click in the password field, update the password then click on Save
How do I log out?

Always log out of the system when done. Good security practice is to log out of a site when finished.

NOTE: Closing a window does not log you out of a site.

  1. Click on Your Name as shown. A menu appears. Click on Log Out
    Snip image for Step 1: Click on Your Name as shown > Click on Log Out
  2. Once signed out you will be redirected to the Hostos Home Page
    Snip image for Step 2: Once signed out you will be redirected to the Hostos Home Page
 

OneLogin Browser Extension

 
What does the OneLogin browser extension do?

A browser extension adds additional functionality to your browser. The OneLogin browser extension provides quick way to access all apps within your favorite browser.

A single-click access to both Hostos Applications and CUNY Applications!

Do I need to install the OneLogin browser extension?

On campus Hostos desktops – No! Hostos Information Technology has you covered.

Off campus & personal computers – Installing it gives you the same single click experience within your favorite browser. Extensions are available for most popular browsers such as Google Chrome, Mozilla Firefox, Safari, Microsoft Edge.

Note: Extension is not installed automatically on Hostos Laptops. It must be done manually as shown below.

Steps below show you how to add the Browser Extension.

  1. Click on Add OneLogin extension
    Snip image for Step 1: Click on Add OneLogin extension
    NOTE: If you chose to SKIP, you can do this any later time.
  2. The browser extension download page opens. Click on Get
    Snip image for Step 2: Click on Get
    NOTE: Shown on Microsoft Edge. Your experience may vary slightly on Google chrome, Firefox, Safari, etc.
    Browser extension is not compatible with mobile browser.
  3. If prompted, click on Add extension as shown
    Snip image for Step 3: If prompted click on Add extension
  4. The download progress indicator will indicate that it is being downloaded
    Snip image for Step 4: The download progress indicator will indicate that it is being downloaded
  5. When done, a message will notify you that the extension has been added. Close this message
    Snip image for Step 5: Close the Extension notification
  6. The Browser extension button now appears as shown. It is now ready for use
    Snip image for Step 6: The Browser extension button now appears
Adding the Browser Extension at any time

If you would like to add a Browser Extension follow steps below.

  1. Click on Your Name. Click on Profile
    Snip image for Step 1: Click on your name > Click on Profile
  2. Click on Browser Extension. Click on Install (Install appears only if the extension is not installed)
    Snip image for Step 2: Click on Browser Extension > Click on Install
  3. You will be taken to the App Extension page. Click on Get. Proceed to install the Extension
    Snip image for Step 3: Click on Get and proceed to install the Extension
  4. When the installation is complete the icon will appear as shown
    Snip image for Step 4: When the installation is complete the icon will appear
Browser Extension Behavior – Logged Out vs. Logged In

The below demonstrates what appears when you click on the Browser extension depending on whether you are logged in or not.

If you are not signed in, you will be prompted to Log in.

  1. When you ARE NOT signed in: Click on the extension icon. Prompts you to log in as shown
    Snip image for Step 1: When NOT signed in > Clicking on the extension prompts you to log in
  2. When you ARE signed in: Click on extension icon. All apps are visible directly as shown
    Snip image for Step 2: When signed in: All apps are visible directly
 

Security Factors

 
Additional Security Factors

Additional security factors such as the Authenticator App or the OneLogin Protect can be added at any time. However, keep in mind both will require you to have an internet connected smartphone with the app installed for it to work.

You also have a choice to change the primary factor if you wish to at any time.

  • Authenticator App – An Authenticator app such as 'Google authenticator' or 'Microsoft Authenticator' can be added as an additional security factor.
  • OneLogin Protect – Similar to above, OneLogin too offers its own authenticator app that can be added as an additional security factor.

All above mentioned apps are optional.

Adding an additional Security Factor
  1. Click on Your Name. A drop down appears. Click on Profile
    Snip image for Step 1: Click on your name > Click on Profile
  2. Click on Security Factors on the menu on left as shown
    Snip image for Step 2: Click on Security Factors
  3. Click on Add Factor
    Snip image for Step 3: Click on Add Factor
  4. You will be prompted to Select Security Factor window as shown. Next go to appropriate section below based on your choice
    Snip image for Step 4: Select a choice in the Select Security Factor window
Adding 'OneLogin Protect' Security Factor
  1. Click on OneLogin Protect
    Snip image for Step 1: Click on OneLogin Protect
  2. When prompted as shown, Switch to your smartphone. On your smartphone, download and open the 'Onelogin Protect' app. Switch back from phone. Click on Activate
    Snip image for Step 2: Switch to your smart phone > App store > Search for/download “onelogin”
  3. A QR Code appears
    Snip image for Step 3: QR Code appears
  4. Switch to your phone for the following steps
    1. Open the OneLogin Protect app
    2. Tap to add an account
    3. IF prompted, allow the app access to the camera
    4. Scan the QR Code displayed on your computer screen
    Snip image for Step 4: Open the OneLogin Protect App > Add an account > Allow access to the camera > Scan QR Code
  5. A success message appears on top as shown. Also, OneLogin Protect appears in your list
    Snip image for Step 5: A success message will appear
Adding 'Authenticator App' Security Factor
  1. Click on Authenticator App
    Snip image for Step 1: Click on Authenticator App
  2. When prompted with the QR Code window, Open your preferred authenticator app on your smartphone. Add New. Scan the QR Code to add the new site
    Snip image for Step 2: Open authenticator app > Add New > Scan the QR Code
  3. The new site appears along with a code (on your phone) within the Authenticator app. Enter the Authenticator code provided into the form as shown. Click on Continue
    Snip image for Step 3: Enter the Authenticator code > Click on Continue
  4. A success message is displayed and the Authenticator App shows up in your list. This indicates that the setup is now complete
    Snip image for Step 4: A success message is displayed and the Authenticator App shows up in your list
Changing the primary Security Factor
  1. Click on Your Name. Click on Profile
    Snip image for Step 1: Click on Your name > Click on Profile
  2. Click on Security Factors
    Snip image for Step 2: Click on Security Factors
  3. Click on the three dots beside the Security Factor you would like to choose to set as a Primary
    Snip image for Step 3: Click on the three dots
  4. A menu appears. Click on Set as Primary
    Snip image for Step 4: Click on Set as Primary
  5. The confirmation message is displayed on top as shown. Also, the change in primary is reflected in the list shown
    Snip image for Step 5: Confirmation message is displayed on top
Updating your Authenticator app(s) after changing a mobile device

If you need to remove any authentication factors from your Hostos SSO profile, you may do so by following these instructions. One of the most common scenarios requiring these steps is if you have set up an Authenticator App on a mobile device and no longer have access to it and need to set up a new one.

  1. Go to your Hostos SSO Profile by clicking on your username and selecting Profile from the drop-down menu
    Snip image for Step 1: Click your username then click Profile
  2. In your Hostos SSO profile, click on Security Factors
    Snip image for Step 2: Click on Security Factors
  3. In the Security Factors page, click on the three dots next to the factor you wish to remove and select Remove from the drop-down menu
    Snip image for Step 3: Click on the three dots next to the factor you wish to remove then select Remove

    Confirm that you want to remove the selected Security Factor and click Remove
    Snip image for Step 3: Confirm the selected Security Factor then click Remove

Please note the following:

  • If you try to remove a Security Factor that is currently your primary factor, you will receive the following prompt to select a new primary factor. Clicking on any displayed factors will make that one the primary and remove the factor that you had originally selected to remove.
    Snip image for New Primary Factor: Before you remove OneLogin Protect, select your new primary factor
  • If you only have one Security Factor, in this case the OneLogin Security Questions, you will see the following message:
    Snip image for New Primary Factor: Before you remove OneLogin Security Questions, you need to enroll a new primary factor
  • You cannot remove the Security Factor if it is the only one you have configured. You will need to click on "Enroll New Primary Factor" and add an additional factor accordingly.
  • If you are looking to change your OneLogin Security Questions and do not have access to any additional Security Factor, you will need to contact the IT Service Desk or submit an IT Job Request for assistance.
  • If you have multiple Security Factors and remove the OneLogin Security Questions, it will be allowed. But the next time you log into Hostos SSO, you will be prompted to set up Security Questions before you can continue.
 

Self Service Password Management using Hostos SSO

 
Resetting/unlocking your Hostos credentials (@hostos.cuny.edu / @stu.hostos.cuny.edu)

Self Service Password Management using Hostos SSO requires you to have completed the initial setup. If you have not done so, please refer to "How do I access my Hostos Single Sign On? (First Time User Experience)" for initial setup instructions.

The following instructions apply to resetting/unlocking your Hostos credentials (@hostos.cuny.edu / @stu.hostos.cuny.edu) and not your CUNYfirst or CUNY Login (@login.cuny.edu) credentials. You can reset your CUNYfirst or CUNY Login account credentials on the CUNY website or by clicking on this link.

  1. On the Hostos SSO Login page, click on the "Forgot Password" link
    Snip image for Step 1: Click on the “Forgot Password” link
  2. On the "Reset Your Password" screen, enter your Hostos e-mail address and click on the Continue button
    Snip image for Step 2: Enter your Hostos e-mail address then click on the Continue button

    Please Note: If you require assistance looking up your Hostos e-mail address, you can click on the "Need Login Help?" link to see your options for assistance, which include using the account lookup tool or contacting the Service Desk.

    If your account is currently locked, you will receive an "Access Denied" message indicating that you are not allowed to reset your password. You will not be able to reset your password until the account lock is removed. You can either unlock your account first (see instructions below) and proceed with the password reset, or contact the Service Desk for assistance.
  3. Complete the reCAPTCHA to proceed
    Snip image for Step 3: Complete the reCAPTCHA to proceed
  4. If you have already configured your Hostos SSO access, you will see the following screen to select an authentication factor. Proceed through this authentication prompt by selecting one of the authentication factors that you have set up
    Snip image for Step 4: Select one of the authentication factors that you have set up

    Please Note: If you have not set up your Hostos SSO access yet, you will be prompted with the following error message saying "Access Denied" You must have set up your account in Hostos SSO to be able to reset your password. Please reference "How do I access my Hostos Single Sign On? (First Time User Experience)" for step-by-step instructions.

    Snip image for “Access Denied” (If you have not set up your Hostos SSO access yet)
  5. On the "Change Password" screen, you will select your new password. As you enter it, the required conditions will have a green checkmark placed next to them. Your new password must satisfy each of the conditions shown, otherwise it won’t be accepted and the Submit button will remain grayed out
    Snip image for Step 5: Enter New Password then click the Submit button
  6. After you click on the Submit button, if the password change has been accepted, you will see a green message indicating that your password has been updated and you can proceed to login in with the new password.

    If the password is not accepted, you will get an error message in red giving the reason why it was rejected. The following are sample screenshots.

    If the new password is accepted:
    Snip image for Step 6: If the password change has been accepted, you will see the message "Your password has been updated"

    If the new password is rejected:
    Snip image for Step 6: If the password change is not accepted, you will see a message giving the reason why it was rejected

Unlocking your Account

After repeated login attempts with an incorrect password, your Hostos account will automatically be locked. For security reasons, this lockout will last for a period of 20 minutes, after which the lock is automatically removed. Instead of waiting, you can perform a self-service account unlock by proceeding through the following steps. As with the password reset, you must have already configured your account with Hostos SSO before being able to use Self Service Password Management.

  1. If your Hostos account is locked, you will get the following message when you attempt to log into Hostos SSO. Click on the Unlock Account button to continue
    Snip image for Step 1: Click on the Unlock Account button
  2. Complete the reCAPTCHA to proceed
    Snip image for Step 2: Complete the reCAPTCHA
  3. Select an Authentication Factor
    Snip image for Step 3: Select an Authentication Factor

    Please Note: if you have only set up security questions, you will not have the option to use an Authenticator app or the OneLogin Protect app for this step. If you have forgotten your security questions, lost access to the authenticator app, or you have not set up your account to use Hostos SSO, you will need to contact the Service Desk for assistance.
  4. Once you have successfully authenticated using one of the available authentication factors, your account will be unlocked and you will see a notice indicating that your account has been unlocked
    Snip image for Step 4: Your account has been unlocked