Assurance

[Lisa Campeau <>]

4.2.4.1  The IdPO shall revoke Credentials and Tokens within 72 hours after being notified that a Credential is no longer valid or is compromised.

 

 

What is meant by ‘no longer valid’ here?  For instance, we discussed this and we could have a faculty member switch to being an unpaid researcher.  We would not want to revoke his Silver status due to the fact that he is inactive in payroll for a time before receiving an active ‘Researcher’ affiliation.  Other faculty members sometimes are affected by having a Business Administrator neglect to extend an appointment, we have major problems if we  revoked silver  status in that case as well. 

 

Do  ‘no longer valid’ and ‘compromised’ mean the same thing?  Or does validity have something to do with morbidity?

 

-          Lisa

 

 

Lisa Campeau

Team Leader, Identity Management Information

     and System Operations

Data Administration - Admin Information Technologies

3401 Walnut, Suite 265C

Philadelphia, PA  19104-6228

phone 215-573-1951 fax 215-898-0386