...
There are a number of IAM data sharing strategies available:
During Authentication: UH Login (Shibboleth and CAS)
A individual's successful authentication to an authorized online web application may result in the sharing of the individual's data from the Person Registry. The application may use that individual's data to determine what the person is authorized to access and how best to organize the presentation of the accessible content.
...
Requests for IAM data sharing are currently driven by Google Forms. DGP staff have access to the underlying data that is collected as requests are submitted. IAM data sharing practices are documented and reviewed by the DGP before each set of changes.