#  HarvardKey Application Integration Policy Compliance  

 



 ##  

  expand\_more  

 
  

 

The HarvardKey Application Integration Policy gives application owners a six-month window to bring their applications into compliance. This process will unfold in two phases:

### Phase 1. HKAR Data Clean-up 

Department Liaisons and App Liaisons should plan to complete the following data clean-up activities for their applications and registrations in HKAR:

####   
Step 1. Locate your Applications and Registrations 

- Find your applications and registrations on the [Applications](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=21e864c89791d510d8353b47f053af64) and [Registrations](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=c5dcbefb97451510d8353b47f053af41) Dashboards.

#### Step 2. Review and Update your Application and Registration Information 

- Ensure all applications and registrations in HKAR are active and linked correctly
    - [Request to delete ](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=a8e4980c975d9510d8353b47f053afa4)or disable registrations that are no longer in use
    - Inactivate applications that are no longer in use by updating the status on the [Application Details](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=7702d14097d9d510d8353b47f053afe6) page
    - Notify the IAM team of [incorrectly linked registrations](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=7702d14097d9d510d8353b47f053afe6)
- For each application, review the following fields on the [Application Details page](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=7702d14097d9d510d8353b47f053afe6) and modify if the data is inaccurate or incomplete:
    - Name
    - Purpose
    - Department (*Please note:* the owning department listed in HKAR should be the technical department responsible for maintaining and supporting the app rather than the business owner)
    - [System Risk Level](https://policy.security.harvard.edu/)
    - [Data Classification Level](https://policy.security.harvard.edu/)
    - User Population
    - Primary Authorization Method
- Review and update contacts associated with your applications
    - Review contacts associated with your applications in bulk using the [Applications, Registrations, Contacts Report ](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=8372856047195d10e01ba098536d43d9)
    - [Add new contacts and update the contact type ](https://harvard.service-now.com/ithelp/ithelp?id=kb_article&sys_id=dff834c74790d1906b944f53636d4385)for all contacts to accurately represent their relationship to the application. The IAM team will add all contacts to our Authentication Services mailing list.
    - Ensure all applications have at least one contact of type [Registration Manager](https://harvard.service-now.com/ithelp/ithelp?id=kb_article&sys_id=dff834c74790d1906b944f53636d4385). This individual will be responsible for attestation of policy compliance for the application.

### Phase 2. Policy Compliance (By January 31st, 2023)

Department Liaisons and App Liaisons should plan to complete the following compliance activities for their applications and registrations by **January 31, 2023**:

- Ensure all registrations have an appropriate [authorization filter](/harvardkey-generic-authorization-filters-0) in alignment with the [affiliation and assurance tiers](/file_url/520)
- Ensure attributes released during authentication are being used in alignment with the [HarvardKey Application Integration Policy](https://huit.harvard.edu/harvardkey-application-integration-policy)

## Need help? 

- For information about HKAR features and links to knowledge articles, please visit the [HKAR index page](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=e3eee3c497dd1910d8353b47f053afb6) in the IT Help Portal.
- Join the weekly Authentication & Authorization Office Hours on Tuesdays from 1-2 PM or email [iam\_help@harvard.edu](mailto:iam_help@harvard.edu). To register for this or for an upcoming office hours session, refer to the following knowledge article: [KB0021507 - Identity and Access Management (IAM) Office Hours](https://harvard.service-now.com/ithelp?id=kb_article&sys_id=a7dd80614719da109f7d957c416d436f) (HarvardKey login required).