University of Florida: External User Authentication for Continuing Education
Summary
How UF Solved the Single-IdP Problem for Destiny One: No Custom Identity Layer Required.
The University of Florida uses Cirrus Proxy as a single authentication layer for Modern Campus Destiny One, serving both institutional users with GatorLink credentials and external learners using Google, Microsoft, LinkedIn, or a UF-branded email and password. Over a 12-month period UF processed 478,000 proxy authentications and generated fewer than 10 user support tickets.
Products
| UF-branded email-and-password credential option for users who cannot or prefer not to use social sign-in. | |
| Configurable discovery screen supporting GatorLink IdP and personal account options. Acts as the single authentication source for Destiny One. | |
| Social and personal provider sign-in for users authenticating with Google, Microsoft, or LinkedIn credentials. |
Key Metrics
478,000
proxy authentications processed in 12 months (September 2024 through August 2025)
< 10
user support tickets generated by users with login issues in the same period.
The Challenge
That single-IdP limitation meant UF needed one authentication layer that could serve their full population. Enrolled students and faculty with GatorLink accounts, alongside external learners using personal Google, Microsoft, or LinkedIn credentials. The solution also needed account linking to maintain persistent identifiers for users whose access might span multiple sessions, systems, or years.
Without a managed proxy, UF would have had to either restrict Destiny One access to institutional users only (cutting off external learners) or stand up a custom identity layer to handle the credential variety (an operational burden no IT team wants to carry).
Goals
How Cirrus Helped
Behind that screen, Cirrus Managed Identity holds a persistent identity record for each external user. A stable UFID is allocated when the user is determined to be unique and linked to the UF Identity Registry. When an external learner signs in with Google one semester and Microsoft the next, they're recognized as the same person. Their record persists. The application receives consistent attributes.
After approximately two years of operation, UF added Cirrus OrgBrandedID as a third sign-in option: a UF-branded email-and-password credential for users who can't or prefer not to use social sign-in. UF was able to add this option without Cirrus customer support involvement. The configuration was managed directly in the Cirrus console.
Impact
478,000 proxy authentications processed in 12 months (September 2024 through August 2025)
Fewer than 10 user support tickets generated by users with login issues in the same period.
Authentication source distribution over the period: roughly 43% GatorLink, 47% Google/Microsoft/LinkedIn, 10% OrgBrandedID.
Single authentication layer for Destiny One serving both institutional and external users from one configuration.
Effectively zero support burden with fewer than 10 tickets across nearly half a million authentications.
Active Expansion to additional applications where non-UF affiliated users need access.
Customer Perspective
"Availability and reliability of authentication systems are paramount for the University of Florida. The Cirrus implementation has given us confidence that users can access what they need with minimal friction and very little operational overhead."
Mehdi Ramdane Associate Director, Information Technology, University of Florida
| 60,000+ Students |
16 Colleges |
200+ Research, Service & Education Centers |