1. © 2011 The University of Chicago Organizational Grouping, or Some New Authority & Risk Issues In Absentia: RL "Bob" Morgan, Kevin Morooney, Michael Gettes In Conscripta: Tom Barton, U Chicago

2.  Integrating institutional groups into a group management system increases capability but also both enhances and challenges authority and risk management  Financial & course groups  Enabling users to access federated services they value by releasing a few attributes about them.  Eg, NIH apps Ken showed us yesterday  Grids, VOs, services discounted for students CSG June 20112 Discussion Areas

3. CSG June 20113

4. 4

5. 5

6. Discussion questions – institutional groups 1.Do you lift institutional groups out of their native context and use them for new things? 2.Have you assessed whether these new uses pose new risks? 3.Who’s responsible for determining appropriate use and appropriate controls? How widely accessible are these groups? 4.Do you (intend to?) enable delegated use of institutional groups? CSG June 20116

7. How many HE Participants enable users to decide to access how many Sponsored Partners? CSG June 20117

8. The Problem  Federations like InCommon enable inter-organizational transactions to happen at scale (do the math!)  But most campuses send specified attributes about their users only to Service Providers with whom they have made a specific arrangement  What happens when a user wants to go somewhere else, if that place needs an attribute about them? Doesn’t work.  What should they, or Service Provider people, do to resolve the matter? They don’t know. CSG June 20118

9. Two approaches to cut this problem down  user consent (not discussed today)  pre-approved attribute release policies  What kinds of attributes seem to be needed?  name  email  affiliation (faculty, staff, student, …)  persistent and lucent identifier, eg, tbarton@uchicago.edu rather than 09ju4fncon43jc3fdfe3 CSG June 20119

10. Which of these policies work for you? Automatically release that “attribute bundle” for … CSG June 201110 OptionWhich Service ProvidersWhich Campus People 1All members of InCommonFaculty & staff 2All non-commercial members of InCommon Faculty & staff 3All members of InCommonFaculty, staff, students that haven’t exercised Buckley under FERPA 4All non-commercial members of InCommon Faculty, staff, students that haven’t exercised Buckley under FERPA 5discuss