University of Southern California

ITS Information Technology Services

A division of the Office of the Chief Information Officer

Attribute Access Request (AAR) Process

Purpose

Through the Identity and Access Management (IAM) program, departments can create secure web applications with current identity-related data in a single sign-on environment (most commonly by using Shibboleth). This allows departments to authenticate and authorize users and personalize web applications without managing a local password process. Also it enhances the protection of personal information by reducing the need for maintaining identity-related information in departmental databases. Instead the Identity and Access Management program stores official identity-related information in a central, highly secure and controlled system called the Global Directory Service.

Attributes Available

Many attributes or types of personal information are currently available through the Global Directory Service. See the GDS Attributes page for more information on these.

How to Make an Attribute Access Request

The Attribute Access Request (AAR) process outlined below is the method through which departments request the data needed to support their web applications. The process assures appropriate use and protection of the personal information maintained in USC's Global Directory Service.

  1. The department contacts IAM-admin-l@usc.edu to request a meeting with representatives of ITS and the USC IAM Steering Committee (IAMSC).
  2. The department completes the Application Data Requirements (ADR) form.
  3. In the course of the meeting, the Attribute Access Request (AAR) form is completed.
  4. The AAR is reviewed by the appropriate data stewards, who may ask for additional information about the request.
  5. Review of the AAR is then scheduled for the next IAMSC meeting. A representative of the requesting department is expected to attend, to present the request and respond to questions by the committee. The Committee may approve the request at that meeting, or ask for additional information. The IAMSC meets every three weeks.
  6. The IAMSC decision is recorded and the approved AAR is forwarded to the IAM team in ITS for implementation. The technical set up of the request takes between two and five business days.

    7. Last updated:
    August 19, 2009

    print this page email this page

Identity and Access Management

The use of all USC computing resources is governed by the USC Computing Policies.