Cloudwork^® controls

Explore Cloudwork's^® 110+  education apps and services →

What does Cloudwork^® offer you?

Cloudwork^® becomes yours

• It can manage all your communities: students, staff, families, alumni and visitors.
• It helps you monitor and control all aspects of your school's data infrastructure.
• It can be tailored to your school's policies and branded as your own resource.

Cloudwork^® costs you less

• It saves time and money because it's easy to implement and easy to use.
• It can do it all, but you only pay for the management modules you want.
• It is Australian owned and developed, independent of expensive vendor silos.

Cloudwork^® supports you

• It provides genuine, local emergency contacts, email, and one-on-one assistance.
• Our staff write, update, and enhance the software to your specific requirements.
• Our modern infrastructure is powerful, stable, scaleable and constantly monitored.

Cloudwork^® CORE

Cloudwork offers facilities for users to manage and customise their own resources. It is fully compliant with multiple global authentication and authorisation information exchange standards. Cloudwork^® apps and services use SAML (Security Assertion Markup Language), the open standard data format for exchanging authentication and authorisation data between parties. School systems are accessed and updated via the following standard mechanisms:

• SIF (Systems Interoperability Framework)
• LISS (Lightweight Interoperability Standard for Schools)
• XML-RPC (XML Remote Procedure Call)
• Ed-Fi Alliance
• LDAP (Lightweight Directory Access Protocol)
• CVS (Comma separated variable files)

User Management

• Single point of control via feature-rich Cloudwork Dashboard
• Create, edit, lock, delete user accounts
• Bulk upload users
• Silently inspect users
• Change password or recovery details
• Set password complexity requirements
• Clear sign-on cookies ('remember me' requires password re-entry)
• Add multi-factor authentication (MFA) via SMS or app
• Clear lockouts, apart from brute-force attack defences
• Weak and compromised password detection and rejection

Group and Org Unit Management

• Create, edit, delete Org Units (OUs)
• Assign users into Org Units
• Create, edit and delete groups
• Upload groups
• Email entire groups
• Maintain Org Units via sync
• Powerful, flexible, rules-based bulk group-maintenance

Reports

• User, Administrator and Provisioning reporting
• Create, manage, delete security alerts
• See billable users
• All services charted and logged in a single facility
• Data provides forensic analysis capabilities
• Log activity reporting is filterable by user, service, event type, date and time
• Weekly activity summary delivered directly to admin mailbox
• Cross-service, real-time logging and charting of all sign-on activity
• Easy to read, cross-service charting of sign-on activity
• Fine grain recording for these event types:
  • authentication, authentication failed, authorisation
  • password reset started, invalid password reset, password reset complete
  • update password recovery details, password change
  • create user, update user, delete user
  • silent inspection

Communication and Templates

• About page
• What's New page
• Bulk send welcome emails
• Create, update and delete message templates
• Templates for welcome emails, forgotten username/password
• Automated welcome message notification of credentials to new accounts
• Broadcast bulk welcome-message notifications
• Mark users as having received a welcome message
• Filter upon user creation-date

User Self-administration

• Update Cloudwork ID settings (logos, background, favicon)
• Allow users to manage their recovery details/features
• Parent-friendly friction-free password reset
• Alumni and parents can use external non-AD accounts
• User-friendly usernames for parent accounts
• Password reset prior to sign on
• Password change post sign on
• Parent-friendly friction-free, no-touch password reset

Privileged Identity Management – Admin Roles

• Create, update, delete customisable administrator roles
• Delegate administrator roles to users and groups
• Restrict application of roles to OUs and groups

Security & Reliability

• Minimal tightly constrained firewall rules
• Fully cloud-based external authentication
• Authentication independent of Active Directory (AD) for when AD not available
• All transmissions and communications are fully SSL encrypted
• Fully encrypted password storage: clear-text passwords never seen or stored
• PCI-DSS audited operations and facilities
• Highly connected networking through direct peering and dual stacking (IPv4/6)
• External non-AD resident accounts are available for alumni and parents
• Password synchronisation with AD
• User-friendly usernames, catering to the needs of parent accounts
• Single point-of-control of identity management via detailed Cloudwork Dashboard
• Privileged Identity Management
• Cloudwork.ID services management
• Administrator management
• Password complexity – flexible options include honoring AD complexity rules
• Compromised password detection and rejection
• Rate-limiting of password reset attempts

Log Export to SIEM Services

• Initially support QRadar SIEM (Security Information and Event Management).
• Currently integrated through SecureISS access to Cloudwork APIs.