Provisioning and Deprovisioning Policy Considerations and Case Studies

Provisioning and Deprovisioning - Policy Considerations and Case Studies In. Common CAMP Conference November 15, 2013

Session Moderator: C. W. Belcher, University of Texas Speakers: Theresa Semmens, North Dakota State University; Noreen Hogan, University of Oregon Jim Jokl, University of Virginia Andrea Harrington, Penn State Dustin Slater, University of Texas

Abstract As you provide more outsourced and cloud services, granting and removing access becomes more and more important. What are the policy considerations as you look at your process? How do campuses handle guests, affiliated groups, students who attend other institutions, and other specific use cases? We can't provide you with all of the answers, but can get you started on the right questions to address

How do you start a process for provisioning and de-provisioning users?

How do you do provisioning/de-provisioning in a measured, accurate, methodical way? Students/faculty/staff/guests/other?

What special circumstances can be anticipated and how would your institution handle them? • Examples: • Guests, visiting profs, researchers, students, conference participants, etc. ; • Transgender persons; • Those who want to remain private/anonymous; • Those who don’t want to use their full given name; • Those with names with a long character count, e. g. , 50 characters; • Faculty & students who are affiliated with more than one institution; • Other unique situations.

How do you de-provisioning those who have been forcefully terminated, resigned, retired or have been transferred to another position.

What is being done to educate your campus departments that are integrating with cloud/remote SP’s about the importance of thinking about provisioning/de-provisioning “up front” in the implementation process? What other challenges are you facing with this? (At many higher education institutions, cloud integrations are being driven by colleges and departments, not central IT. )

• How do you work effectively with service providers to help them understand what/when data is provided via SAML interactions and when out-of-band data feeds will be needed for provisioning/de-provisioning?

Questions Suggestions Comments Contact Information CW Belcher – cbelcher@austin. utexas. edu Andrea Harrington – avh 3@psu. edu Noreen Hogan – noreenh@uoregon. edu Jim Jokl – jaj@virginiaedu Dustin Slator – dslater@austin. utexas. ed Theresa Semmens – theresa. semmens@ndsu. edu