Identity and Access Management

What is Grouper?

Last modified 5/8/2024

Grouper is an application that gathers data about users from SQL Databases, directories (LDAP/AD), or its own internal reference tables, and assigns the users to groups that are then used to populate groups in the directories or group data can be published to database tables. 

Grouper is maintained by the Internet2 community and additional information about it can be found on their website: https://incommon.org/software/grouper/

How to request access to Grouper

Submit a ticket to the Technology Service Center (supportcenter@ilstu.edu) requesting access. Please include the following in the ticket: name of the team requesting access and who the supervisor of the team is.  Once we have this created for your team we will reach out and walk you through the basics of how to use Grouper.

Please note: Team members that will have the ability to create and delete groups will be required to log in with their administrator (privileged) accounts.  Administrative accounts can be requested by submitting a ticket to your local support team.

Getting Started

Grouper is introducing a range of industry standard terms to the population at Illinois State University and if some of them are unfamiliar a reference guide is available here: Common terms in Grouper.

Grouper is a powerful tool that can do a large number of things and not all it can do has yet been realized. To highlight some of the things Grouper is capable of doing the following document has been made available how Grouper can be used. As new uses are realized and implemented they will be added to this list. 

Folders in Grouper

Creating a group and adding members

Getting groups into the directories

Recommended Practices

We are recommending that the following be implemented to prevent conflicting names of groups in the directories, ease changes in ownership of groups, departmental name changes, and ensure that we are creating future ready groups.

Group Naming Convention Standard

Team Name Attribute Standard

Websites

Grouper is linked to the environments that correspond with their names. The Production environment is connected to the Active Directory, LDAP, and Entra ID environments that are in use everyday. The test and development environments are connected to their corresponding resources and can only be used to manage them as such.

Production: https://grouper.illinoisstate.edu/grouper

Test: https://grouper-test.illinoisstate.edu/grouper

Development: https://grouper-dev.illinoisstate.edu/grouper

Still Need Assistance?

Please submit a ticket to the Technology Support Center (supportcenter@ilstu.edu) requesting it be directed to the Office of Identity and Access Management

See Also: