...
Lafayette College's IAM team created data-driven groups in Grouper. These Those groups will be are populated based on employee class codes that are maintained in Banner. These Those reference groups are included in a composite group that which in turn is used to provision the LDAP group used to control VPN access.
Two additional ad-hoc groups for contractors and students factor factored into the Grouper pilot use case. These Those groups will eventually be managed by end users that are authorized to grant VPN access to those cohorts.
Nothing will change in changed with respect to the way that in which authorization to the VPN happenshappened at a technical level. Grouper will write writes memberships to the VPN LDAP group which will is still be used for the control group. The improvement will be A major improvement that Grouper bring to the process is that decision makers will now have direct control over VPN access rather than having to route all requests through the IAM team.
...