http://www.internet2.edu/products-services/trust-identity-middleware/grouper/

Grouper is an enterprise access management system designed for the highly distributed management environment and heterogeneous information technology environment common to Universities. Operating a central access management system that supports both central and distributed IT reduces risk.

• Coordinated Collaboration Grouper helps collaboration happen. You can set up groups, roles, and permissions for many purposes, such as populating and administering standing committees, ad hoc research teams, departments, or classes. Key collaborative applications -- mailing lists, wikis, calendars, etc. -- can use this group, role, and permission information to make authorization decisions.
• Single Point of Control When using Grouper, once a person is added or removed from a group, the group-related privileges are automatically updated in all of your collaborative applications. Grouper allows efficient management of the membership roster at a single point.
• Who Can Use Grouper? Anyone needing to manage group access to resources can use Grouper -- from accountants to zoologists. A researcher might create a group and enable members to participate on an email list or view a web site. Students might use Grouper to set up and manage groups for similar applications as they work together on shared projects and class work. Your IT staff can delegate group management and enable those leading collaborations to set up and manage their own groups.

Grouper releases can be downloaded from here.

• Grouper wiki is available here.
• API documentation is available here.
• Issue tracking system is available here.

Clone the repository and execute the build via:

git clone git@github.com:Internet2/grouper.git
cd grouper-parent
mvn clean package

To build the project documentation, execute the following:

cd grouper-parent
mvn site site:deploy
cd /tmp/grouper-parent
[launch] index.html