Presentation is loading. Please wait.

Presentation is loading. Please wait.

Live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639

Published byNoah Randall Modified over 8 years ago

Similar presentations

Presentation on theme: "Live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639"— Presentation transcript:

1 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org

2 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org FRIENDLY NAMING CONVENTIONS – LEVERAGING THE POWER OF OPEN LDAP AND MULTIPLE DIRECTORIES Abhishta Bodapti Karl Horvath Lauren Halupke Gwynedd-Mercy College

3 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org WHERE IS GMC LOCATED?

4 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org 3000+ STUDENTS

5 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org HOW BIG IS THE IT DEPARTMENT?

6 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org 18

7 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org How many projects do we have at hand?

8 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org 50+

9 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org PROBLEM THE PROBLEM

10 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org

11 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org HOW IT LOOKED?

12 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org NAMING CONVENTION?

13 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org DEPARTMENTS INVOLVED?  Administrative Systems  Enterprise Systems  Desktop Support  Information Systems

14 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org PROJECT GOALS  No changes to AD  Build a fail-over DC solution  Ease of use for end-user  Cost

15 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org RESOURCES

16 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org SOLUTION

17 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org MULTIPLE DIRECTORIES?

18 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org W HAT ARE THE BENEFITS ?  Multiple directory integration  Selective (regEx) import of directory user groups  Convert user groups (directory) directly to roles (local to myCampus)  Simultaneously leverage both imported (from directory) and existing (from myCampus DB) groups / roles

19 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org W HAT ARE THE BENEFITS ?  Import additional personal attribute(s) to empower SSO bridges to enterprise applications  Ability to set hot LDAP/AD failover in case primary LDAP/AD is not reachable

20 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org W HAT IS THE "M ULTIPLE D IRECTORY " CONCEPT ?  Leverages PAF (P ersonal A ttribute F ramework )  PAF = middleware between myCampus and CAS  CampusEAI's PAF application acts as a CAS client that consumes CAS attributes.PAF  Uses the CAS SAML validation filter to consume user attributes, including group and role memberships.

21 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org W HAT IS THE "M ULTIPLE D IRECTORY " CONCEPT ?  It uses attributes to create and synchronize the myCampus user base with data from one or more sources.  This is a required component for Multiple Directory configurations but is also available for single source environments.

22 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org H OW DOES IT WORK WITH AD OR LDAP  CAS can be configured with one or more Authentication Handlers.  An ldapAuthenticationHandler is typically configured to authenticate users against a school's enterprise LDAP server.  A fileAuthenticationHandler is typically configured to authenticate users against a configured users.properties file.

23 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org K EY F ILES  users.properties  authenticationHandlers-local.xml  deployerConfigContext-local.xml  credentialsToPrincipalResolvers-local.xml .edu/paf/configuration

24 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org H OW DOES IT WORK WITH AD OR LDAP  Defines all authenticationHandlers authenticationHandlers-local.xml

25 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org  Define location (IP) of directories with LDAP Bind Accounts deployerConfigContext-local.xml

26 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org  Map attributes from LDAP (key) to Principal (value) credentialsToPrincipalResolvers-local.xml

27 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org  Map attributes from SAML validation to corresponding myCampus attribute. Available to be edited in GUI.edu/paf/configuration

28 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org PAF Configuration Screen The “Behavior” section allows the mapping of attributes in the response to myCampus arguments for creating a user. The left hand side should contain the attribute as shared in the SAML validation. The right hand side is the corresponding myCampus attribute.

29 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org Preserve Existing and Imported User Groups / Role Membership In this scenario, certain, configurable groups/roles may wish to be preserved (i.e. not blown away ) on sync “existing values” refers to user groups/roles local to myCampus system “imported values” refers to the user group and roles brought in from the directory (UserGroup1|UserGroup2).* = All User Groups or Roles

30 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org HOW IT LOOKS NOW?

31 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org I NTERESTED IN M ULTIPLE D IRECTORY ?  Multiple Directory Integration? Estimated Project Cost: $ 4,000  Directory Replication and Cloud Hosting Estimated Project Cost: $ 8,000

32 live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org

Download ppt "Live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639"

Similar presentations

Agenda 2 factor authentication Smart cards Virtual smart cards FIM CM

Agenda 2 factor authentication Smart cards Virtual smart cards FIM CM
1111 Superior Avenue Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 Identity Management.

1111 Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Identity Management.
Mike Bayne 15 September 2011

Mike Bayne 15 September 2011
IBM Software Group ® Accessing Domino via Outlook iNotes Access for Microsoft Outlook - Notes Domino 5.5 – 6.0.1 Domino Access for MS Outlook - Notes Domino.

IBM Software Group ® Accessing Domino via Outlook iNotes Access for Microsoft Outlook - Notes Domino 5.5 – Domino Access for MS Outlook - Notes Domino.
Implementing and Administering AD FS

Implementing and Administering AD FS
Dorian Grid Identity Management and Federation Dialogue Workshop II Edinburgh, Scotland February 9-10, 2006 Stephen Langella Department.

Dorian Grid Identity Management and Federation Dialogue Workshop II Edinburgh, Scotland February 9-10, 2006 Stephen Langella Department.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 1: Introduction to Windows Server 2003.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 1: Introduction to Windows Server 2003.
Teamcenter™ Security Services SSO

Teamcenter™ Security Services SSO
Important when you launch Yammer Enterprise Create an engaged and trusted community Decide about User Profile Syncs Various User and Admin.

Important when you launch Yammer Enterprise Create an engaged and trusted community Decide about User Profile Syncs Various User and Admin.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 1: Introduction to Windows Server 2003.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 1: Introduction to Windows Server 2003.
#CONVERGE2014 Session 1304 Managing Telecom Directories in a Distributed or Multi-Vendor Environment David Raanan Starfish Associates.

#CONVERGE2014 Session 1304 Managing Telecom Directories in a Distributed or Multi-Vendor Environment David Raanan Starfish Associates.
Enterprise Search. Search Architecture Configuring Crawl Processes Advanced Crawl Administration Configuring Query Processes Implementing People Search.

Enterprise Search. Search Architecture Configuring Crawl Processes Advanced Crawl Administration Configuring Query Processes Implementing People Search.
Microsoft Identity and Access Solutions Market Trends and Futures

Microsoft Identity and Access Solutions Market Trends and Futures
Vikram Thakur Introduction to Active Directory Structure.

Vikram Thakur Introduction to Active Directory Structure.
Chapter 12: Additional Active Directory Server Roles

Chapter 12: Additional Active Directory Server Roles
August 25, 20151 SSO with Microsoft Active Directory Presented by: Craig Larrabee.

August 25, SSO with Microsoft Active Directory Presented by: Craig Larrabee.
Module 1 Introduction to Managing Microsoft® Windows Server® 2008 Environment.

Module 1 Introduction to Managing Microsoft® Windows Server® 2008 Environment.
Module 1: Introduction to Administering Accounts and Resources

Module 1: Introduction to Administering Accounts and Resources
Module 12: Designing an AD LDS Implementation. AD LDS Usage AD LDS is most commonly used as a solution to the following requirements: Providing an LDAP-based.

Module 12: Designing an AD LDS Implementation. AD LDS Usage AD LDS is most commonly used as a solution to the following requirements: Providing an LDAP-based.
Attribute Resolution. 2 © 2010 SWITCH Terms: Attribute A piece of information about a user. Each attribute has a unique ID and has zero of more values.

Attribute Resolution. 2 © 2010 SWITCH Terms: Attribute A piece of information about a user. Each attribute has a unique ID and has zero of more values.

Similar presentations

Ads by Google