...
UCLA deployed multi-factor authentication (MFA) in its Shibboleth Single Sign-On service in June 2016. Our goal, over time, is to require MFA use campus wide. On our way to that goal, we recognize that it is necessary to develop a flexible architecture allowing us to flexibly configure which population we turn on MFA for. Grouper is calculation engine we use to track who needs to enroll, who has enrolled, and who are the exceptions.
External Service Entitlement Attribute Management (PAC-12 TV and HBO GO)
...