PennGroups, an offering of ISC's Identity Management Services, is a centralized middleware system allowing distributed management of permissions and groups of people/entities for authorization or other reasons (e.g. email lists). It is built on top of Internet2's Grouper product.
Using the online tool Penn Groups, you can electronically manage access to Penn resources, from web applications to physical resources (such as printers), and more.
- Groups can be quickly created and automatically maintained based on affiliations or other centrally managed data
- Group membership can be automatically updated based on external triggers and events (e.g., when a person leaves Penn or changes roles within Penn)
- Easy creation and maintenance of custom, ad-hoc lists of group members
- Multiple services can share the same lists of provisioned group members
- Centralized deprovisioning: closing an individual’s access to multiple resources in a single location