Template for documenting solutions to provisioning person data to LDAP
Purpose of documentation: Help people evaluate potential solutions to their local need
What system is the authoritative source of person data?:
How is a person record represented in that source?:
How are changes to person records conveyed from the source to the LDAP connector?:
What is the finest unit of operation? Whole person entry, attributes withing entry?
What component performs the LDAP connector functions?
How is the mapping from source representation to LDAP representation configured?
How are actual LDAP operations performed?
Challenges:
- If authoritative source provides only a periodic full data store representation (e.g., batch file)
How do you transform that to a set of create/update/delete events?