Manifest - Services

Manifest groups can allow group members to access various enterprise services (Wireless Access, Office365/email, Google/G-Suite). This document describes the process to request and the services that can be requested by group administrators in Manifest.

If you have any questions about the approval process or wish to expedite the process, please contact manifest@doit.wisc.edu.

Note: Only research collaborators that need access to VPN to access research resources can qualify for MFA & VPN access via Manifest. For all other populations, the ability to grant WiscVPN and Duo access via Manifest has been deprecated in favor of adding users that need VPN access into HRS as a Person of Interest (POI). 

Available Services

  1. WiscWorld - Gives users Wireless Access, as well as a base requirement for Office365, and Google. WiscWorld is the most commonly requested service (the ability to grant WiscVPN access via Manifest has been deprecated in favor of adding users that need VPN access into HRS). Groups with the WiscWorld service enabled grant members access to the following:
    • On-campus use of Wireless and use of Eduroam worldwide.
    • Office365, Google and other services require further authorization, please note in the comments so appropriate approvals can be forwarded.

    Members will need to activate services if they already have an active NetID. See: NetID - Activating Missing Services

  2. NetID - This is not the ability to invite people to create NetID eligible identities, this service makes existing NetIDs remain eligible to authenticate when current affiliation ends. This service is rarely used.  

    Unless you are working with someone in IAM or work for IAM this is probably not what you want to do.  What you are probably looking to do is invite users to create a NetID. The process of using manifest groups to invite users to create NetIDs is documented in Manifest - Using a Manifest Group to Invite People to Create Identities (NetIDs)

Requesting Service-Enabled Groups

To request the services discussed above, group admins must follow the two step approval process below: 

Request Service Approval

  1. To begin the process, navigate to My Groups in the Manifest interface and choose the group for which you would like to provide services.
  2. Click Details next to the group name. 
  3. Click the Services tab. 
  4. Under the Available section you will see services available to request.
  5. Comments can be added detailing the reason for your request. If you need Office365, Google or other services based on WiscWorld you'll want to note them here.
  6. Click the Request button.

Your request(s) will be sent to the respective service owner for approval and you will see the selected services appear in the Pending section of the form. Once approved, you will receive an email and the service will move to the Accepted section. Your group members will then be able to access the corresponding service(s) after logging into a fresh session with their NetID.

Note that it may take several business days for service owners to review requests. If any questions arise throughout the approval process, or if you wish to expedite the process, please contact manifest@doit.wisc.edu.

MFA or WiscVPN for Research Collaborators

External collaborators that need access to VPN to access research resources can qualify for MFA & VPN access. Individuals with access to Research Drive are given access to Duo MFA and WiscVPN if added to a drive's external group, therefore this process does not apply to that population.

Access requests for Duo MFA and/or WiscVPN eligibility will only be considered for Manifest groups associated with research. To request access, email mstsupport@doit.wisc.edu with the following information:

  1. The path of the group you would like the services to be added to. The Group path is available in the details for the Manifest group beneath the group name or the group UUID can be copied from the browser URL for the group.
  2. The services you would like added to the group: Duo MFA and/or WiscVPN
  3. A description of the users that will be in this group and the reason they require the requested services.

Once approved, you will receive an email with confirmation that the group is now Duo MFA and/or WiscVPN service enabled. Your group members will then be able to access the corresponding service(s) after logging into a new session with their NetID.

See Also