Terms & Conditions acceptance during login

 Ensure school T&Cs are accepted

New Feature

Studentnet is releasing a new feature enhancement available for schools to incorporate into their login sequence. The T&Cs feature allows schools to ensure that appropriate T&Cs have been accepted by their community members as a part of their login sequence before they gain access to school provided facilities..

Customisable

The T&C feature is customisable such that different T&Cs can be defined for different portions of your school community. This means that the T&C that applies to parents of senior students could be different to those that apply to junior students. Or the T&Cs for students may relate to uniform policy or discipline policy or sporting policies - again different portion of your community and different T&Cs.

Integrated 

Using AD, EntraID, Okta or ViewDS as your enterprise directory? The T&C feature is built in to the Studentnet IdP meaning it fully supports any external directory authentication source. Smooth integration, complete flexibility and extra capability, all using your existing directory. 

Logged & Auditable

Acceptance(or rejection) of T&Cs is logged for every account holder. The log is not modifiable by IT staff. Plus, the wording of the T&C is fixed once published. This means that the acceptance of the T&C is auditable in the future ensuring it becomes a reliable reference point.

User Convenience

The presentation of the T&C is incorporated into the normal login sequence for account holders. It is a part of their login process without any need to link to other sites or content to conclude their acceptance.

Once an account holder has accepted the T&C, their acceptance is recorded and they no longer are required to accept that T&C again.  

Future  Growth

School administration has the flexibility to update their T&Cs with a new version that will require re-acceptance by the respective community affected. Only the most recent T7C is presented to the account holder.

OU level Granularity 

The T&C that applies to your community members, or even if acceptance is required, can be defined down to the OU level of granularity in your Studentnet user list. 

 More Information

Contact the Studentnet team for more information - we'll be happy to give you a demonstration.

p: +61 2 9281 1626

e: info@studentnet.net 

 Studentnet^®: Canvas Data Breach Advisory

Media reports

• Links to media reports of the breach

• https://www.techrepublic.com/article/news-canvas-instructure-breach-275m-users/
• https://www.abc.net.au/news/2026-05-06/australian-educational-facilities-impacted-by-canvas-hack/106650094
• https://www.msn.com/en-au/news/other/australian-universities-probe-canvas-hack-as-ransom-deadline-nears/gm-GMBE2BA5F5
• https://athenaboard.com/2026/05/06/the-canvas-data-breach-a-vital-wake-up-call-for-australian-education-governance/
• https://cybernews.com/security/canvas-lms-shinyhunters-data-breach/
• https://www.bitdefender.com/en-us/blog/hotforsecurity/canvas-data-breach-2026

• Studentnet advice to ensure secure operation

• Studentnet advice to schools is to:
• rotate their Canvas API keys, and then
• Configure new keys in their CLoudwork dashboard
• Breadcrumb: Home>Domains>Canvas
• Establish authorisation rules to control who can still login to Canvas. You may wish to inhibit all access or just restrict access to certain staff. More information on how to establish authorisation rules can be found here: https://wiki.studentnet.net/index.php/Authorization_Rules

Follow up

• Please submit tickets via:

• email: help@studentnet.net
• ticket portal: https://support.studentnet.net
• phone for urgent support: +61 2 9281 1626

Perth school students involved in data breach

With another student hacking story in the news this week, we've put together some information to help you stay secure. #cybersecurity #schools #cloudwork #sso

 

 

Urgent Upgrade Notice V47-Android Auth app June 21, 2024

The Cloudwork Operations team advise of a critical upgrade affecting the Cloudwork Android authenticator app(both the generic version and the school branded version). On the 21st June 2024, Google are deprecating the Android push notification APIs currently used in Cloudwork V46(and previous). Cloudwork's V47 supports the new Google APIs. If you are using the Android version of our app, the upgrade needs to be deployed to your school by 21/6/2024. We need to schedule in a time slot to upgrade your school to the latest Cloudwork V47 in order to continue supporting push notifications in Android. (Please note that even if you do not receive the notification, you can still open the app on your phone after being prompted in the browser to complete authentication). Please send an email to help@studentnet.net advising us of your preferred date and time for completing the deploy of V47. This will create a ticket which you can use to monitor the progress of this task. Thank you for your assistance in completing this critical task. The Studentnet Team

Social Media Sign On - Cloudwork v46 Release Notes

 

Cloudwork^® v46 Release Notes

New Features

• Social Media Sign Ons

• Added the ability to enable and configure Social Authentication (Log in with Facebook, Microsoft, Google, Apple)

• Automatic provisioning of accounts permitted to use Social Media Sign Ons

• Increased security through independent account verification
  

  OU level granular configurability

• Adobe syncing

• Redesigned for greater efficiency and volume handling

• Increased volume capacity by addressing Adobe API's Rate Limiting Issues, improving Cloudwork's Adobe Sync Processes

• Able to Sync Cloudwork's Users, Groups and Group members into Adobe for creating, updating and deleting accounts.

• Improved simplified IT administrator workflow with Cloudwork's Adobe Sync. The Admin no longer needs to manually implement licences to each user in the Adobe Admin Console. Once Cloudwork's Users, Groups and Group Members are synced into Adobe, the Admin will only need to implement a licence profile to a Group within the Adobe Admin Console

• Automated linking of Adobe accounts into Cloudwork. Cloudwork's Adobe Sync will check for existing Adobe Users, and if the email matches, it will link the Adobe Account to Cloudwork.

• Suspended Options for Cloudwork Users. The options are to either be removed from the Adobe Organization, removed from the Adobe Organization and delete the account permanently, or ignored.

• Any changes or updates on a Cloudwork OU or Group regarding Name Changes or Deletions from Cloudwork will be correctly updated in Cloudwork's Adobe configuration. This fixes syncing issues for those OU or Groups that had been updated, which now correctly includes them in the Adobe sync process.

• Log export to SIEM services

• Initially support QRadar SIEM.

• Currently integrated through SecureISS accessing Cloudwork APIs.

• Forgot Username messages

• New template options

Fixes and improvements

• Added the "I trust this device" option to the Cloudwork Authenticator MFA method

• Fixed an issue where Multifactor authentication and ADFS prompted too often

• Fixed some bugs around authorization rules and MFA

• Fixed an issue where the trust token for MFA was some times not stored correctly

• Fixed some sync profiles losing custom attributes

• Small updates to Azure syncing

• Fixes to User search: Will now search alternate email addresses

• Fixes to Groups UI: Groups with multiple group types no longer breaks the Groups UI

• Other UI improvements: Spelling mistakes, grammar improvements

• Started transitioning to Sendgrid's API instead of SMTP for sending email

Passwordless Sign On - Simple, Convenient Secure

Cloudwork PlatformID - world first support for Apple's Platform SSO

 

Apple's Platform SSO: An independent status update   In a significant first for local innovation, Cloudwork® is proud to advise the availability of Cloudwork PlatformID v1 supporting Apple Mac's Extensible SSO and Platform SSO v1.   Schools planning their 2024 device management need to know more about the status and relevance of this announcement.

Image source: Apple.com

Let's start with a quick re-cap: Apple announced both Extensible SSO and Platform SSO v1 at their June, 2022 WWDC. The announcement stated: Extensible SSO will allow seamless single sign-on for users, instead of separate sign-ons for device access, apps and websites. Platform SSO allows school administrators to use identity provider (IdP) credentials to centrally manage passwords, permissions and group memberships. To support these new features, Identity Providers needed to build an installable extension for the managed Mac devices. At the time of announcement, very scant details or documentation were available to Identity Providers to build this new extension. Cloudwork responded to these announcements by committing to providing support for both Extensible and Platform SSO. In a significant first for local innovation, Cloudwork® is proud to advise the availability of Cloudwork PlatformID v1 supporting Apple Mac's Extensible SSO and Platform SSO v1. Using Jamf Pro as the Mobile Device Manager (MDM) and Cloudwork as the Identity Provider we'd like to walk you through an end-to-end experience starting from a clean Mac moving on to password synchronisation and desktop and web sign-on integration. The walk through can be experienced via these four videos: CloudworkPlatformIDv1-Step1-EnrolDevice CloudworkPlatformIDv1-Step2-RegisterUser CloudworkPlatformIDv1-Step3-PasswordSync CloudworkPlatformIDv1-Step4-MacExtensibleSSO

But the story does not end there.
 

At the June 2023 WWDC Apple announced the availability of Platform SSO v2, significantly enhancing its functional range and value:

• Supports local accounts: Platform SSO is designed to be a modern replacement for binding to directory services.
• Integrates into macOS: Platform SSO is integrated with macOS and doesn't use JavaScript or render webpages for authentication.
• Creating users on demand: New local user accounts can be created on demand at the login window using IdP credentials.
• Integrates IdP group membership with macOS: Mobile device management (MDM) configurable groups can be used to manage account permissions.
• Enables the use of network accounts for Authorization: Groups can also be used to authorize network accounts.
• Supports multiple authentication methods: Platform SSO supports many different authentication methods with an IdP.

Cloudwork® has committed to building support for v2 into Cloudwork's PlatformID feature.

Our target is to have v2 available this year for testing in Q4 2023, in time to support schools for the 2024 academic year.

There's a lot in this announcement.

Start your 2024 planning process now! Contact us to arrange a planning session to work through the best options for your school community.

SBS Insight Identity Crime program

SBS Insight: Identity Crime

The SBS Insight program has prepared an episode devoted to Identity Crime. I attended the recording of the episode last night as a non-speaking audience member.

Some of the stories are absolutely harrowing.

They included examples of breaches involving schools. This is a don't miss episode for anybody interested in identity theft and resulting crimes - especially in the education community.

I am so glad that Studentnet is investing so much effort into our Identity Protection initiative for Australian schools.

Insight's Identity Crime episode is scheduled to broadcast on February 28.

Kevin Karp, Studentnet 

Welcome to 2023 - the year of Identity Protection

New Year, New Challenges

2023 - the year elevating the importance of protecting your school's identity and the identities of all of the members of your community be they staff, students and parents.

We'd like to take this opportunity of welcoming all of the new schools that are joining us for the first time in 2023 plus all of our existing outstanding school community. We can see all of the great work that you're doing bringing on board your new cohort of students, parents and teachers. 

We've got a busy year of major feature enhancements planned for Cloudwork to make your life easier and to make your community more secure. For now, it's been a pleasure and honour to work with you all during what is always a busy and stressful time.

Congratulations on another successful start to the academic year!

The Studentnet Team

www.studentnet.net

Studentnet Security & Privacy Credential

Security & Privacy

Commendations

• Australian Privacy Awards 2008 – Highly Commended, Microsoft Small Medium Business category

• Australia New Zealand Internet Awards(ANZIA) 2011, Finalist, Security and Privacy category

Industry Associations

• Cybersecurity Advisors Network(CyAN)

• Access 4 Learning - Schools Interoperability Framework(SIF)

• Office of Australian Information Commissioner(OAIC) - partner

• APNIC

• .au Domain Administration(.auDA) – Supply Member via CoClo

• OpenID Foundation sustaining member – via Parent company Coherent Cloud(CoClo)

• IDPro Advocate level member – via Parent company Coherent Cloud(CoClo)

• Ed-Fi Alliance member

• Internet Society - member

• Internet Society of Australia(ISOC-AU) – Bronze member via CoClo

• Association of Computing Machinery(ACM)

• Financial Services Institute of Australia(FINSIA)

• Managers of IT in Education(MITIE)

Standards

• Cert Australia Partner – registered with Australian Federal Government’s Defence department Australian Signals Directorate as part of Australia’s Critical Infrastructure

• Joint Cyber Security Centre(JCSC) – registered Sydney JCSC partner, an initiative of Cert Australia

• Australian Internet Security Initiative(AISI) – Studentnet was the first education related organisation to participate in and comply with AISI

• APNIC DASH - Dashboard for Autonomous System Health

• Payment Card Industry – Data Storage Standard(PCI-DSS) – Studentnet’s facilities have been audited to comply with the standard required for the storage of credit card and financial data even though we do not retain any such data

• Notifiable Data Breach(NDB) – scheme participant

Technology

Standards

• SAML 2

• oAuth 2

• Shibboleth

• OpenID Connect

Facilities

• GlobalSwitch data centre

• NTT connectivity

• Telstra Connectivity

• Indicium connectivity

• Pipe Networks - peering

oOo

Safer Technology for Schools(ST4S) accreditation for Cloudwork

 

Safer Technologies 4 Schools (ST4S) is a national service that assesses the safety of digital products and services used by Australian schools.

The ST4S badge helps school leaders and educators easily identify suppliers who have been assessed through the ST4S service. This gives schools peace of mind that simple, easy to understand privacy and security information is available for this supplier’s product, and it meets the minimum required standards for use in the badge program.

Studentnet is proud to advise that Cloudwork has successfully qualified to be part of the Safer Technologies 4 Schools (ST4S) Product Badge Program in 2021.

Undergoing assessment under the ST4S program is part of Studentet's security and safety commitment to the Australian education community.

Studentnet Cloudwork V43 Release Notes: AuthentID School Branded Authenticator

 V43 New Features

• AuthentID - A new multifactor option has been added. Find the CloudworkID Authenticator on the Apple and Google Play stores today. Available in generic and school branded versions.
  
• Improved file uploads - A new sync profile for for uploading files has been added. Over time, we'll be migrating email CSVs to use this new sync profile to provide more reliable and more powerful syncing 
• Password Complexity - New password complexity options have been added, allowing for more powerful and flexible password and passphrase rules. 
• MFA - The MFA onboarding workflow has been significantly improved, with better user hints and the ability to continue logging in after enabling SSO 

Bug fixes and improvements

• OpenID Connect support has been revamped to provide large performance improvements 
• New event types have been added for geoblocking related authentication failures 
• Resolved an issue that prevented Azure AD from authenticating SMTP requests correctly 
• Fixed an issue resulting in user sessions sometimes not lasting as long as expected 
• Fixed a bug that sometimes prevented Administrators from replacing the logo in the theme 
• Some changes have been made to improve performance of Adobe syncing. This is the first phase in a longer project to improve support for Adobe 
• New event types have been added for TASS syncing 
• Welcome messages have been updated to allow the SIS ID to be included as a template option 
• Resolved minor security issues

Studentnet’s Holiday Availability 2021/2022

 

The Cloudwork Support team would like to wish you all a fabulous Christmas plus a happy and safe New Year! We just wanted to let you know that all of our normal 24x7 monitoring systems and emergency response arrangements will be in place and operational over the entire holiday period. The following restrictions will apply over the festive season: An embargo will apply on all changes or requests for implementation of new feature between 10am December 24th  2021 and 10am January 10, 2021 All existing account provisioning implementations will continue on their agreed to schedules. No new account provisioning implementations will commence until after the commencement of Term 1, 2022. Between mid December and mid January key vendors do not allow any planned changes. This restricts our ability to complete new orders and to change services.  If you have plans during this period please contact us now for further details about how you may be affected, and please submit orders early to avoid delays. Between the 24th of December and the 10th of January, Studentnet will have skeleton NOC staff available. Non-urgent issues are best communicated via either: submitting a ticket via (https://support.studentnet.net), or sending an email to help@studentnet.net limited phone support will be available during business hours on +61 2 9281 1626 Of course our normal emergency support and operation services still apply. For urgent issues, the contact number for the NOC is +61 2 9281 3905. Once again please have a safe and joyous festive season. The Studentnet Team

Studentnet Advisory TLS 1.2 upgrade & Windows 11 support for TL 1.3

 Hello IT Admins,

We have 2 TLS related advisories for Microsoft Windows listed below.

1. Windows Network TLS 1.2 Upgrades affecting on-prem provisioning

As part of good security practice, many IT admins are upgrading their Windows networks to support TLS 1.2 and deprecating the use of TLS 1.0 and 1.1. This upgrade can affect the processing of Studentnet's Cloudwork Identity Node(CwIN) located on your school premises.

Studentnet started observing CwIN operating issues yesterday(20/10/21) morning. The symptoms are that Cloudwork's on premises provisioning of accounts from your management system to your AD appears to fail to complete.

Studentnet is issuing this advisory to inform you of the issue. There are a variety of solutions depending upon the upgrade status of your various Windows components.

We'd like to discuss the options with you prior to implementing the most appropriate solution for your school. If you experience any difficulty with completion of your account provisioning we request you to please log a ticket on our help portal(here: support.studentnet.net) or by sending an email to help@studentnet.net.

More information on the impact of upgrading to TLS 1.2 on a Windows network is available here:  

2. Windows 11 clients unable to login to Office

Microsoft are enforcing a very hard implementation of TLS 1.3 in Windows 11. At the moment our Cloudwork infra-structure needs an upgrade to support TLS 1.3 but that upgrade will be very disruptive as it involves an entire re-start of our technology stack - something one does not do lightly especially at one of the busiest times of the year for schools.

We have a temporary fix for the problem...

For the moment users on Windows 11 will need to disable TLS 1.3.

This option is under Internet Options -> Advanced

It seems that windows 11's implementation of TLS 1.3 prevents Windows 11 from correctly talking to Cloudwork, however forcing it to use TLS 1.2 works.

We're working on a solution to this issue, however it will represent a fairly large infrastructure update to Cloudwork, and is unlikely to be completed before the Christmas break.

Once we have upgraded our infrastructure to support TLS 1.3 we will send out an advisory at which point those users that have implemented the above fix will need to undo it.

Regards,

The Studentnet Team
PS: Remember to join our LinkedIn Group