Optional group members

We can use isMemberOf (urn:oid:1.3.6.1.4.1.5923.1.5.1.1) to control access to the iThenticate account associated with your IdP.  By default, anyone that can authenticate on the IdP can access the iThenticate account. Using isMemberOf is recommended so that the institution can control access to the iThenticate account for specific groups.