Banner Web Tailor / User Guide / 8.3 - Parent Directory

PINs are managed based on a number of institutional PIN control rules, which aredisplayed and maintained on the Enterprise PIN Preferences Form (GUAPPRF) in BannerGeneral. For more information, see Banner Online Help and the Banner General UserGuide.PIN encryptionBeginning with Release 8.0, PINs are stored in the database in encrypted form. Acryptographic hash is used to transform the PIN before it is stored, so that the unencryptedform of the PIN can never be retrieved from the database. See the “Web Management”chapter of the Banner General User Guide for more information on PIN encryption.Assigning PINsIn Banner, PIN values can be created in a number of ways, and can be updated byauthorized administrative users or the Self-Service users themselves. There are threedistinct ways in which PINs can be created by authorized administrative users:• PINs can be assigned one user at a time, using one of two online forms: the ThirdParty Access Form (GOATPAC) and the Third Party Access Audit Form(GOATPAD). See “Managing User PINs” in the “Web Management” chapter of theBanner General User Guide for specific instructions.• PINs can be assigned for a group of persons simultaneously, using the PINCreation Process (GURTPAC). See the “Reports and Processes” chapter of theBanner General User Guide for information on the GURTPAC process.• PINs can be assigned, at institutional option, by database triggers on the GeneralPerson Base Table (SGBSTDN), Faculty Member Base Table (SIBINST), or theFinancial Aid Applicant Status Table (RORSTAT). See below for details.NoteIf your institution is using an LDAP server to authenticate user logons, youcannot assign PINs in Banner General. They must be assigned in LDAP.Web Tailor’s GOBTPAC user credential authentication is bypassed if yourinstitution uses LDAP to authenticate Banner Self-Service.•Assigning PINs via database triggersData synchronization currently focuses on students and instructors. (Employees andalumni can also be synchronized with the Campus Pipeline/Luminis application platformalone.) Outside of synchronization processing with partner systems, PINs are also requiredfor access to the other Self-Service applications and Voice Response. Because a PIN isrequired to access all of these Self-Service applications, you may want to create PINsbased upon standard operating practices when the end-user first requests access.4-2 Banner Web Tailor 8.3 January 2010User GuidePINs