Gartner ?

[Steven Carmody]

On 7/22/14 12:59 PM, Christopher Bongaarts wrote:
> On 7/22/2014 11:02 AM, Steven Carmody wrote:
>> I think that Christopher Bongaarts from Minn once mentioned a kludge
>> that could be used with Gartner to control access.
>
> Speak the name, and thou shalt summon the daemon....


Thanks, Chris, for sharing your solution.

I think this mostly works. We have two licenses, however, and if a 
person moves between eligibility under one license to the other license, 
then Gartner won't detect that this change has occurred.

>
> We're using an extremely coarse-grained access control mechanism:
> Gartner requires three attributes, surname, givenName, and mail. For
> authorized users (which we base on our library access flags), we release
> these attributes to Gartner; for unauthorized users, we release nothing
> (except transientID).  This has the effect of giving the user an error
> page at Gartner that indicates a problem.
>
> We do not deprovision users, but so far no one has contacted me about
> excessive head counts (I don't know the details of our contract so I
> don't know if there is a billing component based on users actually
> logged in).
>