---
type: concept
title: Zentraler Nutzeraccount
tags: [identity-management, authentication, university-it, identity, account-management, campus-it]
related: [shibboleth, universitatsrechenzentrum-urz, ums, campus-it, automatische-account-erstellung, 2-factor-authentication, account-security-policy]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste.md", "output/rz_uni_greifswald_de_dienste_allgemein_zentraler_nutzeraccount.md", "output/rz_uni_greifswald_de_dienste_allgemein_zentraler-nutzeraccount-2-faktor-authenti.md", "output/rz_uni_greifswald_de_dienste_allgemein_zentraler_nutzeraccount_2_faktor_authenti.md", "output/rz_uni_greifswald_de_dienste_allgemein_zentraler_nutzeraccount_info.md"]
---

# Zentraler Nutzeraccount

The **Zentraler Nutzeraccount** (Central User Account) is a single, university-wide identity and personal user identifier provided by the [[universitatsrechenzentrum-urz]] to authorized users and members of the Universität Greifswald. It serves as the foundational credential and gateway for accessing the majority of the university's digital services and the [[campus-it]] infrastructure.

## Purpose and Scope
This account is mandatory for accessing centrally provided services. Its scope includes, but is not limited to:
- **Communication**: University Email systems.
- **Connectivity**: Campus WLAN (e.g., [[eduroam]]).
- **Collaboration & Learning**: Cloud storage and E-learning platforms.
- **Administration**: The [[ums]] self-service portal for resource management.

## Security and Usage
The account is strictly **personal**. According to the [[account-security-policy]], users are prohibited from sharing their credentials or using them to authenticate with non-university third-party services.

### Authentication and 2FA
To enhance security and prevent unauthorized access, the account is protected by both a password and a second factor:
- **Two-Factor Authentication (2FA)**: The use of [[2-factor-authentication]] via [[totp]] is mandatory. Users must activate this second factor during their initial login to the [[ums]].
- **Monitoring**: The URZ monitors for suspicious access patterns to identify potential credential compromise.

## Lifecycle and Management
The account is managed via the [[ums]].

### Provisioning and Activation
- **Provisioning**: Accounts may be requested manually or created automatically for specific groups (see [[automatische-account-erstellung]]).
- **Activation**: For automatically created accounts, the account is only activated after the user changes their initial password through the [[ums]] (under "Mein Account -> Kennwort").

### Maintenance and Deactivation
- **Maintenance**: The [[ums]] is used for password resets and username changes.
- **Deactivation**: There is a phased deletion process following the end of eligibility, which includes a grace period (Karenzzeit).