A password change on the ENT Sciences Po Bordeaux, and the next morning the phone’s mail application tries to connect in a loop with the old identifier. Three failed attempts later, the account is locked. This scenario affects some students and staff every new school year because the update of access does not only apply to the web browser.
Understanding where the identifiers are stored and in what order to update them prevents this type of lockout.
Synchronized devices and old ENT password: the lockout trap
The CAS portal of Sciences Po Bordeaux (cas.sciencespobordeaux.fr) centralizes authentication. When you change your password via the dedicated portal passwd.sciencespobordeaux.fr, the new password takes effect immediately on the server. The problem arises from everything that continues to query the server with the old one.
A mail client configured on a smartphone (Outlook, iOS Mail app, Thunderbird on PC) sends automatic requests at regular intervals. If the old password is still saved, each automatic attempt counts as a failed authentication. After several consecutive failures, the system may temporarily block access, even from the browser.
Therefore, we apply a precise order. First, we update the password in the main browser, the one where the ENT session is open. Then, even before closing this session, we go to each connected device to change the password saved in the mail clients.
We keep the authenticated browser as a last resort, in case a forgotten device causes a lockout.
To go further in the method, managing access to the ENT Sciences Po Bordeaux also requires knowing where to find your identifier if you have misplaced it.
Inventory of ENT connection points on your devices
We often underestimate the number of places where the ENT identifier is stored. Before any password change, making a complete list prevents forgetfulness that leads to lockout.
Locations to systematically check
- The keychain of the main browser (Chrome, Firefox, Safari, Edge): the password is often saved via autofill. On Chrome, you can find it in Settings > Passwords
- Mail clients on mobile and computer: Outlook, iOS Mail, Gmail configured in IMAP, Thunderbird. Each stores the ENT password independently
- Third-party educational applications connected via CAS: some course platforms or digital libraries keep an authentication token that expires, but others ask for the password directly
- The operating system’s password manager (iCloud keychain, Windows manager, Bitwarden, KeePass): if the password has been saved manually, it must also be updated there
Updating each connection point before the old password is automatically reused remains the only reliable method. Feedback varies on the exact delay before lockout, but acting within minutes of the change remains the safest recommendation.
Recovery email address and digital account security
The security information for the Sciences Po Bordeaux account shows that the recovery email address is as strategic as the password itself. It is what allows access to be reset in case of loss. If this address is no longer valid (old academic email from another institution, abandoned personal address), the recovery procedure becomes impossible without contacting the DSIN.
The verification takes thirty seconds: log in to the password management portal, check the displayed backup address, and update it if necessary. Using a sustainable personal email address guarantees access to recovery even after a change of course.
Logging out and closing the browser on shared computers
The instructions from the Sciences Po portal explicitly remind us: log out and close the browser after logging in on any device that is not strictly personal. Session persistence on a library or computer lab machine exposes the account to unauthorized access.
On a shared computer, using private browsing from the start automatically deletes cookies and session upon closing the window. This is more reliable than relying on the CAS logout button, which does not always clear the browser cache.
Robust ENT password: concrete criteria and daily management
Choosing a strong password for the digital platform of Sciences Po Bordeaux is not just theoretical advice. A weak password on the ENT compromises access to courses, grades, administrative documents, and institutional messaging.
- Minimum length of twelve characters, mixing uppercase, lowercase, numbers, and special characters. A passphrase (three unrelated words, separated by a special character) is easier to remember than a random sequence
- Do not reuse the ENT password on other services (social networks, e-commerce sites). A data breach on another site could provide access to the ENT by proxy
- Store the password in a dedicated manager (KeePass, Bitwarden) rather than in a text file or on a sticky note. A password manager encrypts all identifiers with a single master password
Regular renewal only makes sense if it is accompanied by updates on all synchronized devices, as described above. Changing your password every term without updating your mail clients increases the risk of lockout.
Connecting to ENT Sciences Po Bordeaux from an external network
Connecting from a public Wi-Fi (train station, café, unsecured university residence) adds a risk of interception. The CAS portal uses HTTPS, which encrypts the exchange between the browser and the server. Checking for the padlock and the exact URL cas.sciencespobordeaux.fr before entering your identifiers remains the first reflex to adopt.
On a network where you do not control the configuration, avoid checking the “remember me” box or any session persistence option. If you use a personal VPN, the traffic is encrypted end-to-end, adding a layer of protection on open networks.
Managing ENT access does not rely on a single one-time action. It is a set of reflexes: inventory of connected devices, order of updates after each password change, up-to-date recovery address, private browsing on shared computers. These habits, once formed, become automatic and prevent most lockouts encountered throughout the year.