Overview
Background
The Visitor Registration System (VRS) is mainly used to create records for people who need access to University computing services but who aren't contracted members of staff or matriculating students. The process for creating a visitor is manual, requiring an authorised user to create each visitor record individually. This is a very time-consuming process with some schools experiencing peak periods of visitors resulting in an unsustainable spike of effort being required. In addition, the process is error prone given its manual nature.
There are many areas across the University that currently have to create large numbers of visitor records, both staff and students.
College/Professional Services Group | Example Use Cases |
CAHSS |
|
CMVM |
|
CSE |
|
Several points worth noting:
- The VRS system is currently used as the default route to get a non-staff or a non-matriculating student access to university services. However, it is the IDM service that actually provides the computing accounts that are being sought.
- VRS is an old system, written in code that is now unsupported and as such should be deemed as no longer fit for purpose. Therefore any work done with the system has to be viewed as for the short-term only until the University has developed an alternative solution for this type of identity relationship with the University. Any solution with the current VRS should also be considered as running with a higher level of risk than normal supported services. Support for this project's VRS deliverables can only be provided on a "best endeavours" basis.
- For issuing credentials to new students ahead of their start date, a process has been implemented which uses a second security challenge for EASE.
- The University already has COL students registered in CESAR and ideally identities created in one system will be perpetuated in all systems rather than eg autogenerating v1xxxx identities.
-
MVM did have bulk end date updates completed on the VRS system, not bulk creation, but the project will reflect on what was done in Unidesk calls (I191112-1015 and I180821-1134) and re-use logic where possible. In addition, for the external examiners staff groupings, the project will refer to the University procedures for how the University has to engage External Examiners to ensure HMRC rules are met.
Scope
- The ability to bulk create visitors' computing accounts, assign services to those accounts and to issue credentials are all in scope. This project's scope is to be delivered in as simple a solution as possible and in as short a timescale as resources permit. Therefore the analysis and design will look at the most basic solution that sufficiently satisfies the scope.
Out of scope
- Any dependency with the People and Money (P&M/Core) programme. If the P&M programme provides a solution for the issuing of credentials within this project's timescales, that is also applicable for visitors' accounts, then this project will aim to re-use this. If the P&M programme delivers a re-usable mechanism after this project has closed then the recommendation will be to move to the same issuing mechanism as a future improvement.
- Any enhancements or work on VRS that is not required for this project's deliverables.
Objectives and Deliverables
No | Description | Priority |
O1 | Ability to bulk create Visitors' computing accounts | MUST |
O1D1 | Analysis to identify range of use cases for Bulk creation | MUST |
O1D2 | System analysis and design of bulk creation mechanism | MUST |
O1D3 | Build, testing and delivery of ability to bulk create Visitors' computing accounts | MUST |
O2 | Perform analysis for requested accounts | MUST |
O2D1 | Mechanism to check if repeat visitor | MUST |
O2D2 | Mechanism to check if overlapping or duplicate visit | MUST |
O2D3 | Mechanism to check if already identity with University, eg CESAR account for COL students and to assign this as the identity | SHOULD |
O2D4 | Process for managing exceptions when creating bulk accounts (eg emailing requester to advise of repeat visitor) | MUST |
O3 | Ability to bulk assign services to be provided to Visitors' computing accounts | MUST |
O3D1 | Mechanism to define what services the account is to be assigned on creation | MUST |
O3D2 | Guidance to be communicated to those needing to bulk create accounts on what services can be assigned (updating current guidance to reflect bulk creation) | MUST |
O4 | Process for issuing credentials | MUST |
O4D1 | Process to be defined for requester to know when account and services are available (eg in format that enables mail merge) | MUST |
O4D2 | Process to be defined to inform visitor when account and services are available (eg automated mail merge) | MUST |
O5 | Ensure that process for ending visit and deprovisioning services is fully in place | MUST |
O5D1 | Process to be defined to ensure that visitor's services are deprovisioned at the end of the visit (this should already exist but need to ensure bulk creation doesn't interfere with deprovisioning processes) | MUST |
Benefits
Benefit | Owner | Realisation timescale |
Reduction of risk of error by removing manual effort | School creating accounts | Immediate on delivery |
Reduction in time needed to create accounts | School creating accounts | Immediate on delivery |
Quicker access to services - staff effective earlier | School creating accounts | Immediate on delivery |
Improved visitor experience by having access to services from day one | VRS account holder | Immediate on delivery |
Success Criteria
- Schools/Colleges can bulk create Visitors' computing accounts
- Bulk process assigns services to Visitors' computing accounts
Project Milestones
Please note that until the Analysis and Design are completed, it is unclear what will be approved to be built and implemented. At the re-estimation checkpoint, the project's build to delivery scope and milestones will be agreed. The delivery date should be considered at risk at this stage.
Stage | Milestone | Due Date | Previous Date | Complete |
---|---|---|---|---|
Plan | Project Brief approval | 24-Apr-2020 | 03-Apr-2020 | No |
Analyse | Complete Business Analysis | 05-Jun-2020 | No date available | No |
Analyse | Complete systems analysis and design | 10-Jul-2020 | No date available | No |
Design | Re-estimation checkpoint | 17-Jul-2020 | No date available | No |
Deliver | Delivery of Bulk creation of visitors' computing accounts functionality | 09-Oct-2020 | 09-May-2020 | No |
Close | Closure | 20-Nov-2020 | 05-Jun-2020 | No |