NoviConnect takes identities from Shibboleth: who someone is, which groups they belong to and whether their account is active. Their access in every connected system follows from that.
New account → access from day one
Group change → rights adjust
Account disabled → access revoked at once
The exact scope depends on your version and setup of Shibboleth. We clarify it in the first conversation.