Manifest - Verification Overview

What is Verification?

Some Manifest groups with manually maintained members have verification, also known as attestation, enabled. The verification process ensures accurate group membership and access. Verification is most commonly enabled for groups that provide access to an IT service such as MFA or VPN. Group administrators may also request that verification be enabled for their group by emailing mstsupport@doit.wisc.edu. If groups are not verified by their deadline, their access to services may be removed.

Verification supports the University’s security, IT licenses, and the following policies:.

1. UW Policy 503 Cybersecurity Risk Management (Source: policy.wisc.edu)

2. Regent Policy Document 25-3: Acceptable Use of Information Technology Resources (Source: wisconsin.edu/regents/policies)

Who Completes Verification?

Manifest users with the following privileges are responsible for completing verification. These individuals will receive email notifications from help@doit.wisc.edu with directions and reminders for verification of their groups. 

• People who have ADMIN privileges on the group

• People who have UPDATE and READ privileges on the group

                                   OR

• A designated verification contact. 

  • Note: For additional information, please review Designate a Verification Contact Email (Optional)Manifest - Directions for Verification Process

    .

Verification Timeline

1. Verification is enabled on a Manifest group. 

2. The initial verification due date is set to 40 days after verification is enabled. 

   • People outlined in the Who Completes Verification section will get an email notification.

3. 30 days prior to the verification due date:

   • People outlined in the Who Completes Verification section will get an email reminder every other week.

4. 28 days past the verification due date:

   • People outlined in the Who Completes Verification section will get a monthly email reminder indicating that their group’s verification is overdue.

   • Overdue groups may have access to services revoked

5. When verification is completed, the due date will be reset to 365 days later, and all people outlined in the Who Completes Verification section will receive a confirmation email.

6. Verification will continue to be enforced on a yearly basis.