Grouper Users - Open Discussion List

[Chris Hyzer <>]

Penn uses it, and ...

We have an application for collaboration that researchers use.  It requires 
EPPN.  Some people have problems signing up for it.  I think it is more that 
external users are difficult manage, though maybe Grouper's implementation of 
external users could use some tweaks.

Users need to either:

a. click on the invite link
b. register with Grouper
c. go to the application

-or-

a. click on the invite link
b. try to register with Grouper
c. see that their institution is not there, or EPPN isn't sent by default
d. register with ProtectNetwork or have their IDM team release EPPN (well, I 
don't know if that has happened yet).  Note, if you register with 
ProtectNetwork, you have to confirm with an email link (3 links involved for 
this flow... confuses people)
e. click on the invite link
f. register with Grouper
g. go to the application


1. Invites expire in a week (this is configurable), might want to bump that 
up from the default, multiple times invitees have let it expire and then need 
to get in.  btw, whoever supports the app should set this in the 
media.properties so they know if they can resend the invite etc

#if admins should be emailed after each action, put comma separated addresses 
here
externalMembers.emailAdminsAddressesAfterActions =


2. I think if somehow groups or folders could have an attribute that had the 
application URL, which would included in the invite email for those groups, 
that could make the invite process easier, the inviters don't always give 
that to the invitees...  or even better if after they register it sends them 
to the app they are signing up for, or puts a link on the screen.

Overall it seems fine though

Thanks,
Chris

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Peter DiCamillo
Sent: Wednesday, October 24, 2012 10:02 PM
To: 

Subject: [grouper-users] Experience with Grouper external user support?

We're tentatively planning to use Grouper external user support to meet 
a requirement we have to provide external access to our Canvas learning 
management system. We already provision Canvas from Grouper, and we 
could build on that to include external users as well. External users 
would authenticate to Grouper using Shibboleth, and authenticate to 
Canvas using their SAML equivalent to Shibboleth.

Grouper external user support seems to be working well in our testing. 
However, as part of this project, I've been asked to find out to what 
extent other sites are using Grouper external user support, and their 
experiences with it. If your site has that experience, I'd appreciate a 
brief description of it. Thanks!

Peter