Abstract:Background: This research delves into the critical aspects of identity management, access control, and authorization practices within the domains of public and private universities. Identity management involves the meticulous management and control of user identities, encompassing the establishment and maintenance of user profiles, role assignments, and access privileges. Access control is the practice of defining and enforcing policies that govern who can access an IT system or application and which resources they can interact with. Authorization, meanwhile, determines the specific actions and privileges granted to users based on their roles and permissions. Methods: To understand the variances in identity management and access control approaches, we conducted a comparative analysis between public and private universities. Our investigation scrutinized the user populations with access to university systems, the enforcement of access limitations, authentication methods, and password policies. Additionally, we examined the nuances of authorization processes, levels of authorization, access approval authorities, user status and role changes, unique user account management, account deletion procedures, user authentication methods, password complexity and expiration policies, password storage methods, and session termination policies. Results: This study revealed that both public and private universities prioritize these security measures, with a common categorization of these processes. Nevertheless, there exist disparities, such as the inclusion of contractors and vendors in the user population at private universities, the manual deletion of user accounts in private institutions, and variations in password policies and storage methods. Private universities tend to enforce stricter password policies, employ more secure password storage methods, and implement automatic session termination features. Conclusions: This research provides valuable insights into the practices and approaches adopted by public and private universities to safeguard their digital environments. The findings serve as a valuable resource for enhancing identity management, access control, and authorization protocols, enabling institutions to fortify their cybersecurity defenses in an ever-evolving threat landscape.

Information Security Synthesis in Online Universities

Construction of security architecture of web services based EAI

Identification and mitigation of the vulnerability of web applications in institutions of higher education

Comparative analysis of identity management, access control, and authorization practices in public and private universities

Evaluating virtual laboratory platforms for supporting on-line information security courses

The analysis and inspiration of information security management in U.S.universities

Should we wear a velvet glove to enforce Information security policies in higher education?

Building a Viable Information Security Management System

An Exploration of Information Technology Security Education and Training Strategies for Higher Education Teaching Services

The need for effective information security awareness practices in Oman higher educational institutions

A Framework of Information Security Integrated with Human Factors

Security Ontology in a Virtual University

Perceived Security of E-Learning Portal

Security awareness of single sign-on account in the academic community: the roles of demographics, privacy concerns, and Big-Five personality

Student Academic Record Systems and their Security Issues

Emergent Insight of the Cyber Security Management for Saudi Arabian Universities: A Content Analysis

Information security analysis on physical security in university x using maturity model

Information Security Plan for Flight Simulator Applications

Virtual Classrooms and Real Harms: Remote Learning at U.S. Universities

Analysis and Countermeasure on Information Security in Universities

Information security policies’ compliance: a perspective for higher education institutions