Grouper at U of T: Innovation Through Integration

Campus use of institutional identity and single sign on (SSO) have made a substantial difference in reducing information and exposure risks, although the ability to control access to a resource remains elusive. Role... [ view full abstract ]

Campus use of institutional identity and single sign on (SSO) have made a substantial difference in reducing information and exposure risks, although the ability to control access to a resource remains elusive. Role management tied to institutional identity allows for fine-grained access control, but this is often challenging to do in a highly heterogeneous environment with distributed and variable IT governance typical of academic settings. This talk will focus on how role management systems can be leveraged to reduce information risk, provide delegated access control to those best placed to make access control decisions to particular resources, and improve integration between services based on University of Toronto's two years of experience with Internet2's Grouper application.