Jim Beard, University of Oregon
Lightning Talk on IdM from Rearview Mirror
Some aspects didn't get enough attention in the design and implementation phase of the IdM project.
One of challenges is "dirty" user interfaces.
IdM from Sun is very feature rich.
Since there was a short time in implementation phase, look and feel was sometimes sacraficed for functionality.
Now the number of people looking at the admin side of system has grown. The team had originally assumed only one or two people would be looking at it. It turns out that systems and network systems folks wanted to look at it. More training has been neeed.
Thec access management implementation pulled curtain back on some of the business processes in place (Banner, etc.)
It became clear people weren't always getting forms in on time
There were issues when someone can't get to their account because someone is on vacation.
A lot of improvements have occurred in business processes.
Advantages:
- allowing people to claim their accounts sooner
- Being able to communicate w incoming students is important. The university has been bumping that timeline to an earlier date each year. Now by May students can claim accounts for entry in fall.
People have accounts set up before coming to campus - Account management in general has improved
Accountmangers working from files, I have 100 eople , now they can look it up w query to system. Bulk actions.
Visisble audit trail for a lot of events and lify cycle
We replaces a home grown system that had been around for 15 years
Was klugy
Weren't logs
Putting out fires was hard.
These are the big things that have stood out in our mind
Renee Q: one of the challenges in extending life cycle is working w security office
How do you work this out to let students access resources before seeing a student?
A: our security team has given us advice on best practices. But other than that they are hands off. So haven't dealt w them on a continual basis, just as needs arise
Cal: do you have student identity ?
A' most done thru registration. Using banner. They get a pac and access code
When they identify themselves originally they use univ ID and Banner PAC code
We rely on fact they got letter sent to them
RL BOB: how does that data get into Banner?
Well its according to processes of previous schools . there is a whoel IdM process that happens there, data coming in from thousands of places. It's fairly ? to those of us. It's a black art of admissions that manages to figure out who people are. Relys on paper mail. And yet this is how we identify people. It is a funny business
JIM: yes, we need close relationship w registrar and admissions
We have a ?that helps takes data in and ?
Carrot and stick.. we say, we';d like to let your students set up their accounts but here is what we need to make that happen. That helps make things happen
Florida: we did it wnen students come on campus . must align w photo ID.
They arenot really trusted until they get to campus and show a photo ID.
But with an online program where we never see the person the the Photo ID method breaks down. You don't know the person online is the same as the person getting the degree.
RL BOB: what is the obligation of the institution to ensure that the person getting the degree is who they say they are? What is the requirement?
Jim: I don't have a law degree
There are regs for granting a professonal degree
But not for undergraduates
Liz: yes these things are mysterious as far as how was gather the data.
When we talk to senior HR officers , they tell you yes, all regular staff must show ID for employee orientation. But we won't make ? do that. We trust ? who is hiring a temp
Depend on ID badging stations, they are staffed by student temps
Need to push this with the administration and be sure it gets addressed at a high level