Gartner ?

[Robert Roll]

> as Michael noted, deprovisioning is the problem. Its particularly a
> problem for campuses like mine that provide lifetime accounts. 

  I appreciate all of the responses. After reading the couple of comments
about de-provisioning. I'm getting a little bit confused. I believe Michael stated
originally that Gartner would actually use no-value in ePE to reject access ?
Or does this only work for the first access when deciding whether or not
to create an original account ?

 We do actually have a current Gartner authZ in place that uses an old http response that I believe
encrypts username/timestamp to allow/deny access. No one in my current group actually set that
up and I'd have to research how that really works. Now, I'm not sure whether that is only used
for first account set up or not..

 In any case, I'm wondering if we should just stick with that rather than switch to what
I would consider a "deficient" Federation implementation ?

Thanks,

Robert
________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Steven Carmody [steven_carmody at brown.edu]
Sent: Tuesday, July 22, 2014 10:02 AM
To: users at shibboleth.net
Subject: Re: Gartner ?

On 7/22/14 11:50 AM, Michael R. Gettes wrote:
> and i will add, gartner remains deficient in this area and i have
moved on since they don’t seem to care too much about fixing their
issues - like manually deprovisioning users. if you would like to lead
the charge, i’m right behind you :-)

interesting that the group many campuses rely on for IT consulting
doesn't seem to understand the standard authentication/authorization
model used by services for more than a decade.  ;-)

as Michael noted, deprovisioning is the problem. Its particularly a
problem for campuses like mine that provide lifetime accounts. An
undergraduate can access Gartner under our license; when that person
becomes an alum, they can still login at Brown, and Gartner still lets
them in even tho we are no longer asserting that they are covered by our
license. Gartner suggested that that we use their UI, and manually
deprovision all the graduates every May. Really, that's what they said !

I think that Christopher Bongaarts from Minn once mentioned a kludge
that could be used with Gartner to control access.

>
> /mrg
>
> On Jul 22, 2014, at 11:47 AM, Tom Scavo <trscavo at gmail.com> wrote:
>
>> On Tue, Jul 22, 2014 at 11:42 AM, Robert Roll <Robert.Roll at utah.edu> wrote:
>>>
>>>
>>> Has anyone out there had experience with setting up their Shib IDP to
>>> work with Gartner ?
>>
>> https://lists.incommon.org/sympa/arc/participants/2013-07/msg00029.html
>>
>> HTH,
>>
>> Tom
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net