Active Directory Account Provisioning (ADAP)

Transcription

1 SUNGARD SUMMIT 2007 sungardsummit.com 1 Active Directory Account Provisioning (ADAP) Presented by: Tom Chamberlin SunGardHE March 22, 2007 A Community of Learning

2 Introduction Developed by SunGard Integration Services in response to a institutional demand to create and synch accounts originating from the Banner Student system Accounts attributes are synchronized with a central authentication data store Technical Implementation Review Future Plans 2

3 SUNGARD SUMMIT 2007 sungardsummit.com 3 Account attributes Active Directory Account Provisioning (ADAP) A Community of Learning

4 LDI event element <userid useridtype="logon ID" password="pass">user</userid> <userid useridtype="logon ID" password="pass">user</userid> <family>abe-kim</family> <family>abe-kim</family> <partname partnametype="middlename">s.</partname> <fn>dr. Jennifer S. Abe-Kim</fn> <tel teltype="1"> </tel> <street> </street> <locality>los Angeles</locality> <region>ca</region> <pcode> </pcode> <prefix>dr.</prefix> CN=userid, <<student/faculty ou>> Shared folder Active Directory attribute samaccountname Password givenname sn middlename displayname telephonenumber Mail streetaddress L St postalcode personaltitle Common Name in Active Directory Shared folder path\<<userid>> Description Unique identifier of Active Directory Active Directory Password will be Banner pin on create, password will not be updated in future. Given name of the person Last name of the person Middle name of the person Display name Telephone number of the person will be set to <<username>@domainmame specified in configuration Street address of the person Locality State Postal code Personal title Common name (AD Specific) Create share folder with userid and set permissions to the user.(faculty/staff/student roles) as required by client.

5 SUNGARD SUMMIT 2007 sungardsummit.com 5 Technical Implementation Review Active Directory Account Provisioning (ADAP) A Community of Learning

6 <Insert here> LDI messaging slide

7 <clarify JMS topic used> Purpose Value LMG connects to LMB using this user LMG connects to LMB using this password LMG consumes Grade Exchange messages off of this Queue LMG produces Grade Exchange reply messages on this Queue LMG produces all events to this Topic LMG produces filtered events for Learning Management Systems (WebCT, Blackboard, etc) on this Topic LMG will consume error messages and orphaned UpdateReply messages from this topic, in the future LMG Queue Connection factory to connect to JMS broker LMG Topic Connection factory to connect to JMS broker LMG Topic Connection factory to connect to JMS broker using SSL SCT_LMG_USER SCT_LMG_PW com_sct_ldi_sis_updaterequest com_sct_ldi_sis_updatereply com_sct_ldi_sis_sync com_sct_ldi_sis_lmssync com_sct_ldi_sis_error com_sct_ldi_sis_queueconnfactory com_sct_ldi_sis_topicconnfactory com_sct_ldi_sis_ssl_topicconnfactory LMG Queue Connection factory to connect to JMS broker using SSL com_sct_ldi_sis_ssl_queueconnfactory

8

9 SUNGARD SUMMIT 2007 sungardsummit.com 9 ADAP Process Active Directory Account Provisioning (ADAP) A Community of Learning

10 ADAP Process Uses SunGard HE Integration Technologies Takes advantage of the JMS Messaging Technology through the use of the LDIPERSON event Upon message consumption, process makes ADSI calls to the Active Directory (AD) server

11 Summary Uses SunGard HE Integration Technologies Integration data attributes are processed via the use of ASDI calls Data attributes can be manipulated by institutions to support other integration data requirements SunGard HE envisions that institutional business requirements will support expansion of the ADAP service

12 Future Plans Integration ADAP into the MS MIIS server

13 Questions & Answers 13

14 Active Directory Account Provisioning (ADAP) Tom Chamberlin Team Manager Integration Services (office) evaluation form Please complete the online class SunGard, the SunGard logo, Banner, Campus Pipeline, Luminis, PowerCAMPUS, Matrix, and Plus are trademarks or registered trademarks of SunGard Data Systems Inc. or its subsidiaries in the U.S. and other countries. Third-party names and marks referenced herein are trademarks or registered trademarks of their respective owners SunGard. All rights reserved.