07.12.02 Resetting Passwords / Unlocking Accounts

Effective Date: 09/1/2019

The purpose of this guide is to provide step-by-step instructions to CCR&R and Site providers on how to reset a password or unlock an account for both Active Directory and RACF.

The Active Directory account is what's used to log onto CCMS - it is also referred to as your External.Illinois.Gov ID, and generally uses your first and last name as the user ID (First.LastName).

The RACF is a separate account that's used to log onto Web3270 - the user ID always begins with DHS.

Important Items to Note:

  • To utilize the DoIT Identity Management self-service functions, each user must first set-up Account Recovery Options. This must be done BEFORE you need your password reset or your account unlocked. It is recommended you set the Account Recovery Options up as soon as your Active Directory and RACF IDs are established. See the instructions below for more information.
  • Your account will be locked if you attempt to login incorrectly (e.g. wrong password) 3 times in a row.

Setting up Account Recovery Options

  1. Go to id.illinois.gov. You will be directed to the DoIT Identity Management landing page. Click on "Account Recovery Options" under Identity Management Options.
  2. You will be directed to the Account Recovery log-in screen. Please note: you must set-up Account Recovery Options for each account you have. If you have both an Active Directory and a RACF account, this means you will need to complete the Account Recovery set-up steps for each account separately.
    1. To set-up account recovery for your Active Directory, set the Domain to "External User (Not employed by the State of Illinois)." Enter your Active Directory ID (FirstName.LastName) and current password and click "Log On."
  3. Regardless of whichever account you log onto, you will be directed to the Account Recovery Options landing page. Users have three account recovery options - to reset your password or unlock your account on your own, you must provide information on at least one of the recovery options. You may choose to reset your password or unlock your account using a recovery email, a recovery cell phone, and/or three recovery questions. Once you've established the recovery option information you want to use for your account, click "Done."
  4. You will be redirected to the DoIT Identity Management landing page. Remember: if you have both an Active Directory and RACF account, you must complete steps 2-3 for each account.

How to Reset/Unlock an Account

  1. Once your Account Recovery Options have been set up, you can navigate to id.illinois.gov at any time to reset your password or unlock your account. From the DoIT Identity Management landing page, click on "Reset your Password or Unlock your Account" under Identity Management Options.
  2. You will be directed to the "Reset your password" log-in screen. Set the Domain to whichever account needs the password reset/unlocked:
    1. For Active Directory (CCMS), set the Domain to "External User (Not employed by the State of Illinois)." Enter your Active Directory user ID, type in the image code displayed, and click Continue.
    2. For RACF (Web3270, HSCCMS), set the Domain to "RACF - All Users." Enter your RACF user ID, type in the image code displayed, and click Continue.
  3. Select which action you want to take on your account - Reset My Password or Unlock My Account. Note: you must know your password to unlock your account. Select how you want to verify your identity based on your Account Recovery Options. Click continue.
  4. You will receive a confirmation that your password has been reset or account unlocked. If you reset your password, you will be given a temporary password on this confirmation page. It is recommended that you immediately log into your account and change your password.