Grouper Developers Forum

[Chris Hyzer <>]

Im working on syncing groups between two groupers, and one piece that was needed was an external subject WS parameter… so now if you are adding a member to a group, you can specify a param, and it will add the user as an external member if it is not found…  this is in WS and client…

 

https://bugs.internet2.edu/jira/browse/GRP-515

 

Regards,

Chris

 

From: Chris Hyzer
Sent: Wednesday, December 01, 2010 2:35 AM
To: 'Grouper Dev'
Subject: RE: external subjects

 

Hey,

 

I am considering myself done with Grouper external subjects (done as in, complete J ).

 

Everything is on the demo server, you can try it out, test it, let me know about issues, etc.

 

https://spaces.internet2.edu/display/Grouper/Grouper+external+users+on+demo+server

 

Since last email, this is what I added:

 

-          Invitations using email address

-          Invitations using login ID (Washington asked for this at member meeting)

-          User level auditing (who did what)

-          Emails to admin when actions occur (optional)

-          Links from the Admin UI and Lite UI to the invite screen for provisioning to that group

-          Links from invite screen back to admin or lite UI (if focused on a group)

-          This works because you can put a group name or id in the URL of the invite screen to provision to the group (and you see it on the screen too)

-          Attribute assignments used to not expire automatically, now they do

-          You can enable or disabled the invite or registration screen individually (default is disabled)

-          There is a DB view for invitations

-          There are 12 new DB views that show attribute framework values for the 12 types of attribute assignments (group, stem, group assignment, etc)

-          The email address that an external user responds to is stored in a “vetted email” column in the DB (multiple will be stored there).  Admins can use this as a good way to contact external subjects that were entered due to email invite.

-          When one invitation is clicked on by an external user, all pending invitations for that user (by email address) are processed

-          The inviter is emailed when the external subject registers

-          External subject identifiers can be validated like an email address (eppn?) and certain regexes can be configured as invalid (e.g. don’t allow registrations of people from my institution, they aren’t external)

 

Everything is documented here:

 

https://spaces.internet2.edu/display/Grouper/Grouper+external+users

 

Let me know any feedback.

 

Thanks,

Chris

 

 

 

From: Chris Hyzer
Sent: Wednesday, November 24, 2010 1:49 PM
To: Grouper Dev
Subject: external subjects

 

I installed Grouper 2.0 (alpha) on the demo server, and separated out the external subject register from the UI in the httpd.conf (even though both are shibboleth in this case).  So now you can register with shib (protect network if you don’t have another in common ID).

 

I will be enabling (and testing) more features of this, but now the barebones is usable… let me know if there are problems…

 

Self register:

 

https://grouperdemo.internet2.edu/grouper_v2_0_0/grouperExternal/appHtml/grouper.html?operation=ExternalSubjectSelfRegister.externalSubjectSelfRegister

 

When done, go to the UI:

 

https://grouperdemo.internet2.edu/grouper_v2_0_0/

 

Here the demo part documented on the wiki:

 

https://spaces.internet2.edu/display/Grouper/Grouper+external+users+on+demo+server

 

So now in the UI code, a bunch of the static resources (css, images, js, etc) were moved to the grouperExternal folder… I wonder if we should just move everything over there so we don’t have to move more things in the future…

 

Thanks to shilen for doing the shib part…

 

Regards,

Chris