1. LDS Account Integration

2. Disclaimer This is a training NOT a presentation. – Be prepared to learn and participate in labs Please ask questions Prerequisites: – Java Knowledge – Basic understanding of LDAP

3. History In the beginning Maven and CruiseControl – Produced an.ear Automated config and deploy Bundles – Produced a.zip with an.ear/.war and env config – DB Migrator produced a migration.zip Anthill Pro replaces CruiseControl – Introduced secondary process execution

4. What is LDS Account? LDS Account is meant to be the single source for user authentication and basic user information LDS Account is implemented with LDAP LDS Account is an application for maintaining user attributes

5. LDS Account "LDS Account is a single user name and password for any person who interacts with online LDS Church resources. LDS Account is the primary account authentication credentials for most Church sites and applications. It reduces development costs that would be incurred as the user interfaces change, or as upgrades to security and the registration process are required. Unlike previous authentication systems, LDS Account is a branded single sign-on solution that is centrally managed at ldsaccount.lds.org."

6. LDS Account (cont.) "LDS Account has become the key to accessing all the resources the Church has to offer, such as family history tools, ward and stake websites, employment resources, and more.... The idea is to have only one username and password that you can use with all password-protected websites the Church has."

7. User Details LDS Account also provides user information – User details – User details can be exposed through LDAP attributes, or WAM headers, or SAML attributes

8. LDS Account integration in the Stack Consists of two main parts – Authentication – User information (details)

9. LDS Account User Details Integration The LDS Account module acts as a Java model for LDS Account information LdsAccountDetails.java is the abstraction layer for LDS Account user details integration Factories generate LdsAccountDetails object for each user – Factories handle the different formats in which the raw user details attributes are provide to the application LDAP attributes, WAM headers, SAML, …

10. Lab 1 https://tech.lds.org/wiki/LDS_Account_Integration _-_Part_1#Lab_1

11. Spring Security

12. Maven Lifecycles Maven uses lifecycles to orchestrate goals Phases represent steps in a lifecycle Default process-resources compile test-compile test package integration-test install deploy Clean pre-clean clean Site site site-deploy

13. Example Binding in Pom Config … war org.apache.maven.plugins maven-enforcer-plugin 1.0.1 enforce compile

14. Lab 2 https://tech.lds.org/wiki/LDS_Account_Integration _-_Part_1#Lab_2

15. Conclusion LDS Account rocks! The Stack LDS Account integration rocks! Shamu rocks!

16. Credit Where Credit is Due