def tenant_can_use_tas(tenant):
    """Return whether a tenant can use TAS for uid/gid resolution. This is equivalent to whether the tenant uses
    the TACC IdP"""
    if tenant == 'DESIGNSAFE' or \
       tenant == 'SD2E' or \
       tenant == 'TACC-PROD':
        return True
    # all other tenants use some other IdP so username will not be a TAS account:
    return False