CU-CAT Identity Authority
Sign in to CU-CAT
Use your CU-CAT identity to continue to protected CU-CAT applications and administration.
Primary email is the sign-in identifier. Backup email remains recovery-only. Password-reset tokens are short-lived and single-use. Authenticator-app MFA is enforced when policy requires it. Passkey authentication is available for registered discoverable credentials. Google, Apple, Microsoft, and GitHub appear only when each provider is enabled and completely configured. External-provider sign-in authenticates only identities that are already safely linked to CU-CAT. Central sessions are validated against SQLite on every authenticated request and expire automatically. Repeated failed sign-in attempts are throttled, and sustained failed password authentication can automatically place an eligible account into the Locked state.