Organizational Identity Sources allow for the creation of Organizational Identities linked to an external source or "system of record". These sources can include LDAP servers, REST APIs, SQL databases, flat files, and so on. Custom plugins can be written for arbitrary sources.
Organizational Identity Sources are either defined at the platform level if org identities are pooled (when Org Identities are shared across COs, it follows that Sources should also be shared across COs), or on a per-CO basis if they aren't. Once configured, Organizational Identities can be created from these sources in several ways:
- Using default enrollment, via People >> Organizational Identities >> Add New Org Identity From Source.
- Using an Enrollment Flow.
- Via a batch process. (Not yet implemented; CO-76)
When an Organizational Identity is created from a source, it is linked to that source and cannot be manually edited, not even by an administrator. However, it can be manually resynced to pull changes from the source.
If the corresponding record is removed from the Organizational Identity Source, on the next sync the Org Identity will be set to status Removed, but the Org Identity itself will remain available – it is not deleted.
Terminology
The terminology used by Registry can be a little confusing when looking at person records related to Organizational Identity Sources.
- View Organizational Identity: Retrieves the current Org Identity operational record used by Registry in normal operations.
- View Organizational Identity Source: Performs a live query against the Org Identity Source backend and retrieves the current data as known to the backend. ie: This is the source's current data.
- View Organizational Identity Source Record: Retrieves the last data retrieved from the backend and used to create or update an Org Identity. ie: This is Registry's copy of the source data.
- Add New Org Identity From Source: Create a new Org Identity based on the Org Identity Source's data. In addition, this will create an Organizational Identity Source Record.
- Resync Org Identity From Source: Update the Org Identity and Organizational Identity Source Record using the latest (current) data available from the Org Identity Source.
- Configuration >> Organizational Identity Sources: Manage the plugins used to define and query one or more Org Identity Sources.