Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Experience with Grouper external user support?

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Experience with Grouper external user support?

Chronological Thread 
  • From: Chris Hyzer <>
  • To: Peter DiCamillo <>, "" <>
  • Subject: RE: [grouper-users] Experience with Grouper external user support?
  • Date: Fri, 26 Oct 2012 16:50:11 +0000
  • Accept-language: en-US

Penn uses it, and ...

We have an application for collaboration that researchers use. It requires
EPPN. Some people have problems signing up for it. I think it is more that
external users are difficult manage, though maybe Grouper's implementation of
external users could use some tweaks.

Users need to either:

a. click on the invite link
b. register with Grouper
c. go to the application


a. click on the invite link
b. try to register with Grouper
c. see that their institution is not there, or EPPN isn't sent by default
d. register with ProtectNetwork or have their IDM team release EPPN (well, I
don't know if that has happened yet). Note, if you register with
ProtectNetwork, you have to confirm with an email link (3 links involved for
this flow... confuses people)
e. click on the invite link
f. register with Grouper
g. go to the application

1. Invites expire in a week (this is configurable), might want to bump that
up from the default, multiple times invitees have let it expire and then need
to get in. btw, whoever supports the app should set this in the so they know if they can resend the invite etc

#if admins should be emailed after each action, put comma separated addresses
externalMembers.emailAdminsAddressesAfterActions =

2. I think if somehow groups or folders could have an attribute that had the
application URL, which would included in the invite email for those groups,
that could make the invite process easier, the inviters don't always give
that to the invitees... or even better if after they register it sends them
to the app they are signing up for, or puts a link on the screen.

Overall it seems fine though


-----Original Message-----

On Behalf Of Peter DiCamillo
Sent: Wednesday, October 24, 2012 10:02 PM

Subject: [grouper-users] Experience with Grouper external user support?

We're tentatively planning to use Grouper external user support to meet
a requirement we have to provide external access to our Canvas learning
management system. We already provision Canvas from Grouper, and we
could build on that to include external users as well. External users
would authenticate to Grouper using Shibboleth, and authenticate to
Canvas using their SAML equivalent to Shibboleth.

Grouper external user support seems to be working well in our testing.
However, as part of this project, I've been asked to find out to what
extent other sites are using Grouper external user support, and their
experiences with it. If your site has that experience, I'd appreciate a
brief description of it. Thanks!


Archive powered by MHonArc 2.6.16.

Top of Page