The following uhReleasedGrouping values are made available by ITS as an added convenience. Developers may find it useful to check for these values as part of their application authorization step.
Curated Groupings
Our UH Group Store has a wealth of groups that would be useful to UH applications. ITS will work with the Data Governance Program to curate a collection of groups from the UH Group Store and make them available via uhReleasedGrouping.
Having a curated collection of groupings in uhReleasedGrouping means your application can check against a lot of official data without having to create a grouping. Of course, if you expect to manage exceptions, you should create your own grouping (usually with some of the groups in our curated collection) and release it.
Remember that uhReleasedGrouping data is only for official use within the UH community and not for release to external parties, except under the terms of a written memorandum of agreement or contract.
...
| Value of uhReleasedGrouping | Description | Available Since |
|---|---|---|
|
|
Person has registered for multi-factor authentication (MFA) |
and is not in Duo bypass mode. If CAS returns this value after a successful authentication, it can be surmised that the person has passed the Duo prompts in the UH Login screen. | Coming Sep/Oct 2018 |
| mfa-enrolled | Person has registered for multi-factor authentication (MFA). Does not account for Duo bypass mode.
|
removed, after hawaii.edu:store:uhims:general:mfa-enabled is available and everyone has transitioned to it. | 1/22/2018 |
|
No longer available for general use. Contact its-iam-help@lists.hawaii.edu if you need to build a grouping with this information. | 1/31/2018 |
Coming Soon: New Format, More Data
Our UH Group Store has a wealth of groups that would be useful to UH applications. We will work with the Data Governance Program to curate a collection of groups from the UH Group Store and make them available via uhReleasedGrouping.
This means that both, your groupings and our curated collection of groups will appear in uhReleasedGrouping. There won't be namespace collisions because of the nomenclature for each:
...
- The name of the grouping (not the full path). It should only have letters, numbers and hyphens.
- An obfuscated grouping begins with "obf:" and is followed by a long hex string.
...
...
| hawaii.edu:store: |
...
| <dataOrigin>:aff: |
...
Look Ma, No Grouping!
Having a curated collection of groupings in uhReleasedGrouping means your application can check against a lot of official data without having to create a grouping.
Of course, if you expect to manage exceptions, you should create your own grouping (usually with some of the groups in our curated collection) and release it.
Tentative List
| <org>:<roleOrRoleCombinations> |
Provides more granularity than the generic roles of faculty, staff and student. | N/A. Will submit for data governance approval. |