Submitting an Application Add-On Request
This article covers how campus techs and authorized IT staff can submit a request for an add-on to an application.
1. Log in to the IT Service Desk through the direct link or from the campus portal.
2. Click on Other Services.

Click on Other Services in the IT Request Forms section.
3. Select Application Add-on.
There is also a link to the Application Add-on form on the IT Purchase Authorization form.

4. Select the person requesting the IT product/service (if other than yourself).
This Submit on behalf of field defaults to you as the requester. Update this field if the request is for another user.

- Click the caret to open the requester search.
- Enter the requester's Last Name/First Name OR their CSUF email address.
- Then select the appropriate search result.
5. Enter the exact name of the Application Add-On being requested, and a link to the website for the add-on. If known, enter the Application Add-On Developer.
- Enter the exact name of the Application Add-On being requested.
- Enter a link to the website for the add-on.
- If known, enter the Application Add-On Developer. Note that the developer of the add-on may be different from the developer of the application.
7. You may see a pop-up indicating what documents you need to upload for this request. Review the information and then click OK.

8. Indicate if there is an existing campus contract for the application and/or the add-on being requested.
In the example below, an add-on for Zoom is being requested. The campus has a contract with Zoom, so Yes is selected.

9. To include additional users on the notifications for this request, click in the Send notification to these people field. Enter the user's last name and/or first name. Then select the appropriate user from the search results. Repeat these steps to add all of the users who should receive notifications.
- Click in the Send notification to these people field.
- Enter the user's last name and/or first name.
- Then select the appropriate user from the search results. Repeat these steps to add all of the users who should receive notifications.
10. Click Upload to attach all necessary documentation for this request.

10.1. Navigate to where the document is stored on your computer, and then double click on a document to upload it.
10.2. The document is attached. Click Upload again to upload another document if necessary.

11. Enter the purpose of the add-on, what it does, and how it will be used.
Click on the red question mark (?) icon for additional detail on what should be entered into this field.

12. Indicate if this add-on (or the application it is associated with) is involved with the security of credit card data.
This question is NOT asking if you will be using a credit card/p-card to purchase the product/service/hardware.
This question is asking if the product/service/hardware will in any way interact with credit card information which requires specific security protocols to process.

13. Accessibility Assessment
A Voluntary Product Accessibility Template (VPAT) / Accessibility Conformance Report (ACR) is required for all Information and Communications Technology (ICT) Products (Hardware, Software, or Service).
13.1. Select the VPAT option that applies to your request.
View the VPAT section of the IT Purchasing website for more information and resources on VPATs.

If you select I have the VPAT attached, you can use the Upload button to attach the VPAT file (PDF is preferred).
You can also use the Add Attachment option at the bottom of the IT Purchase Authorization form to attach documentation, including the VPAT.

If you select I need to collect the VPAT and will submit it when available, you will see a notation that you will receive an email asking you to return to this form with the VPAT when it is completed.
Your IT Purchase Authorization request will not move forward in the approval process until a VPAT is attached to the request.
If you are ultimately unable to obtain a VPAT for your request, please contact [email protected].

If you select I am unable to find a supplier that meets these standards, you will receive an email requesting that you submit an Equally Effective Alternate Access Plan (EEAAP).
13.2. Indicate whether the vendor has an updated Accessibility Roadmap.

If the vendor does have an accessibility roadmap, you are asked to provide a link to the roadmap and/or attach a document with the roadmap, if available.
13.3. Indicate whether the vendor has an Accessibility Statement.

If the vendor does have an accessibility statement, you are asked to provide a link to the statement and/or attach a document with the statement, if available.
14. Select who will use this product/service.

Place a checkmark to indicate which population will use the product/service.
- One or more students in an academic setting (e.g. one or more students will use this product/service in a classroom or lab or instructional setting)
- For individual use (e.g. one or more specific employees will be using this product/service and accessibility needs are either being met or are not needed)
- University employees whose accessible technology accommodations are unknown (e.g. more than one employee will be using this product/service and you do not know if these employees require accessibility accommodations to use the product/service)
- The general public/Campus wide (e.g. the product/service will be made publicly available on the campus website or the product/service will be made available to all students and employees)

15. Enter Software Purchase information
- Enter the name of the software that you are purchasing (e.g. Zoom AI Companion). It may also help to expand on the name to describe what type of product it is (e.g. Zoom AI Companion is an AI assistant that can generate meeting summaries for Zoom meetings).
- Enter the support plan for the software. In other words, who will fix any issues with this software? (e.g. Zoom Support).

Cloud or hosted services are those not provided with a physical server.
16. Security Assessment
16.1. Read through the Security Assessment information to understand the data classification definitions.

Visit the ISO website link to learn more about data classification definitions.
16.2. Select the appropriate type of data that the product/service will process.

Specify the type of data that will be used with your product/service.
16.3. If you select Level 1 or 2 Data, you will need to specify the type of data being stored or used, and also will see a notation that the University Information Security Office will follow up with you for additional details/documentations.
- You will need to specify the type of data that will be stored or used in the product/service.
- You will see a notation that the CSUF Information Security Office (ISO) will contact you for additional details and information on required documents.
Visit the Higher Education Community Vendor Assessment Toolkit (HECVAT) link to download the form if needed.
16.4. If you select Level 3, acknowledge that only Level 3 data will be used.

17. Optional: Include additional attachment(s) using the Add attachments option on the bottom of the form.

18. Review the information entered on the form for accuracy, and check that all required fields are completed. Any missing required fields will be indicated in the Required information section on the right.
19. Click Submit when you have completed filling out the form and adding attachments.
The Required Information section should disappear, indicating that all required fields have been completed.
20. The request is submitted! Make a note of the RITM number. You will receive an email confirmation of the request within a few minutes.
You can use the RITM number when contacting the IT Help Desk or an IT Subject Matter Expert to follow up on this request.
Need More Help?
For technical assistance, please contact the IT Help Desk at [email protected] or 657-278-7777.
For assistance with the IT Purchasing process, contact the IT Purchasing Team at [email protected].