Overview

MIT Touchstone provides a single-sign-on point of entry for users of MIT services obviating the need for separate local accounts across systems and standardizing basic account management procedures for guest users, like resetting forgotten passwords and making name changes.

In January, MIT Touchstone became the only means of access for non-MIT "guest" users of MIT Wikis.
Since its inception MIT Wikis has defaulted to using MIT Certificates for purposes of authenticating members of the MIT community.
Since Fall 2007, MIT Touchstone login has been available as a fallback option for MIT users, making it possible for members of the MIT Community to log in even if they don't have certificates installed in their browser.

MIT Touchstone is:
1. A centralized authentication and login service for MIT-community users
2. A centralized authentication and account/profile management service for users outside of the MIT community
Touchstone Accounts are:
- Free
- Self-service
- Web-based
- Based on open standards including SAML and Shibboleth
- Shibboleth Single Sign-On enabled

You are a MIT user if you:

have a MIT Kerberos account
have a @mit.edu email address
have a MIT personal certificate

All other users are Guest users

Users with a Kerberos account or personal certificate do not need to create a Touchstone Collaboration Account to use MIT Wikis. Touchstone supports both Kerberos and certificates.

Guest users

All non-MIT guest users MUST have an MIT Touchstone Collaboration Account in order to access access-controled wiki spaces.

Login Steps using Touchstone - All Users

The following applies to all MIT Wikis users except those using personal certificates:

When you click the 'Log In' link or attempt to access an access-controlled resource, you are directed to the "MIT Touchstone" authentication options login page.
Select login button a if you are an MIT user (see above for instructions).
- The grey Touchstone login page is displayed. Choose your preferred login method and click the appropriate button.
- You are redirected back to MIT Wikis.
Select login button b if you are an non-MIT user and you already have a Touchstone Collaboration Account (see above for instructions).
- The red Touchstone Collaboration Accounts login page is displayed. Enter your user name and password. Complete the login.
- You are redirected back to MIT Wikis.
Select the "Sign up!" link if you are an non-MIT user and you don't have have a Touchstone Collaboration Account (see above for instructions).
- Complete the form fields - If you had a MIT Wikis account prior to Jan 30, 2009, be sure to register using the email address you used in association with that account * - complete the word verification, check the Terms of Service box and click *"Create Account."
- Check your inbox (and spam filer) for a Collaboration Account activation email from touchstone-support@MIT.EDU containing an activation code and link. Click on the link, follow the instructions to activate your account.
- Go to step 1 above to access MIT Wikis with your new account information.

Additional Information about MIT Touchstone Accounts

MIT Touchstone FAQ

Touchstone Accounts provide the following services:

Self-service user account registration and maintenance
Self-service password management and resets
Authentication
Shibboleth/SAML attribute releases