IGA Design Review Workshop by

Sources of Authority Nomenclature

2024-08-20 14:28:55 UTC

HR and OGC are currently working on a Visitor Program update, redefining visitor types to be more intuitive, streamline the visitor process, and reduce visit coordinator burden. When this is approved and implemented, how will we map these changes with respect to the defined sources of authority as shown on p. 13 of the IGA design document?

Future of DUO?

2024-08-20 15:10:39 UTC

As we look to leverage DUO as a possible "replacement" for RADIUS, development of targeted solutions will take a significant investment in time/testing. If there are near(ish) term plans to re-evaluate other MFA options, it would be helpful to let IT staff know sooner that later so that we can plan and prioritize appropriately.

Scope of automation

2024-08-20 15:28:12 UTC

When onboarding, is there a limit to the scope of what gets activated? OIS manages Box for Government, InCommon / Sectigo certificate management and Palo Alto's Cortex XDR which all have onboarding / offboarding requirements. I assume other departments have tools that have similar requirements.

Role-Based Access should be added to the roadmap

shawnw3 — 2024-08-20 15:34:28 UTC

Be transparent about what topics are being addressed in what phase of the roadmap.

2024-08-20 17:31:10 UTC

Assures the broader UCAR community that something is not being forgotten or passed over—and help people to focus their feedback at the right time and service owner.

Back-up authentication mechanism

2024-08-20 17:32:12 UTC

For mission critical access in emergency situations (power control systems, required administrative access to on site services, etc.), alternative access is required. Is there a plan to exclude some mission critical systems or provide that alternative mechanism?

PBD -> FI creating aliases function?

2024-08-20 18:55:02 UTC

I used to use PBD to create and manage some aliases. Now many are managed in Google Groups. BUT, normal people don't have the capability to create aliases in Google Groups (which is really annoying). Will there be an alias creation / management function part of FI?

Which system?

2024-08-20 19:12:40 UTC

How will staff know which system to go to in order to request changes? I might think if I wanted to change my username that I'd have to first change my name in Workday. Should we point everyone to make a JIRA ticket and then the request would get triaged?

IGA or WD Fins?

2024-08-20 19:19:36 UTC

Remind me: will signature authority be integrated into FI? Or is that something within the realm of the Workday Financials rollout?

Employee Transitions

2024-08-20 20:52:54 UTC

There are cases where employees take a new role in the organization, but continue to support their previous team for a period of time. I want to make sure there is a workflow and/or exception process for those situations so that the employees' old access isn't prematurely shut off in those circumstances if they are going through a phase out/phase in process.

Early Start

2024-08-21 13:46:30 UTC

How is on-boarding ahead of an actual start date handled? For instance, the host of a visitor wants them to start using the HPCs before their actual start date.

Sudden departure of an employee

2024-08-21 13:48:43 UTC

Say an employee suddenly leaves the organization (no notice, walked off the premises, death) how is access to their work, files, etc. granted?

IAM & Signature Authority.

2024-08-21 15:15:49 UTC

The IGA + Workday Financials teams should work together on synergies between IAM and Signature Authority.

Application support?

2024-08-22 14:38:35 UTC

It's still unclear to me if the solution will support managing application specific roles, groups, user identities. I know there are some "out-of-the-box" applications (like Workday, Box, etc) that will be supported, but will we be able to arbitrarily add roles or policies that will trickle down to other third-party or custom applications?