The future of expiration dates...

December 22, 2016

Dear campus community,

Due to the recent major upgrade of the Identity Management environment, CalNet accounts for former students, employees and affiliates have not been expired since October 4, 2016. We are working towards releasing new software early this spring to resume account expiration. We anticipate these changes to go into effect in mid-March 2017, but that date is subject to change.

The CalNet expiration process will be as follows:

When a CalNet user is no longer eligible, their account will go into a grace period. Examples of a user no longer being eligible: a student who has graduated, an employee who has separated or an affiliate in HCM that has passed the end date. The grace period allows the student, employee or affiliate to continue to access limited services, including bMail, and varies in length depending upon the user’s affiliation. You can see grace period information on our website,

New for 2017! When an account goes into “grace,” the user will get a notification sent to their bMail account. These email reminders will be sent periodically until the account expires.

Each notification email will contain help and contact information should the user believe the upcoming expiration date is an error.

Please note: grace periods and expiration dates are driven entirely by data from our campus source data systems (such as HCM and SIS). To ensure that your employee and affiliate grace period and expiration dates are calculated accurately, please review their end dates in HCM.

For LDAP consumers: Once account expiration resumes, grace periods and notification emails will be driven by values found in the berkeleyEduExpDate LDAP attribute. A berkeleyEduExpDate that is future-dated will indicate that all active affiliations have expired and the account is in its grace period. If a system of record later asserts this person as active again, the berkeleyEduExpDate will be removed.

When berkeleyEduExpDate is populated, this value will be the official date on which a record will be expired. Expiration primarily means the record will be moved into either “ou=advcon people” or “ou=expired people”. For people moved into “ou=expired people”, they will not be able to log into any system. For people moved into “ou=advcon people” because they have an entry in the University Development and Alumni Relations system (ADVCON), they will only have access to a limited set of applications that allow access to those who are in “ou=advcon people”.

If you have any questions about this process, please email

Thank you,

The CalNet Team