...
2012 brought a number of new developments with the use of Grouper at Newcastle University.
The main development has been was the provisioning of groups from Grouper into our Active Directory. Up until the start of 2012, we only provisioned a select number of groups into the AD on a case by case basis. In April 2012 the decision was made to provision all groups that reside in our Application stem within Grouper into the AD. There were a number of reasons for doing this, first of all to improve the resilience of Shibboleth querying group memberships from Grouper (previously Shibboleth queried the Grouper database directly). The second reason was to extend the use of groups past controlling just web resources, so now a group could be set-up which controls access to a wiki, blog, filestore and so on.
...
Another project which has incoporated incorporated the use of Grouper is work around "hot desking" and ensuring that staff members have access to the applications they require wherever they work. Our application support team have created over 40 groups representing different applications such as Skype, Filezilla, with departments/individuals assigned membership to these groups. These groups are provisioned into the Active Directory so that they can be used with the deployment of Microsoft's App-v and RDS so that applications follow the user.
...