SLAC National Accelerator Laboratory has embarked on a program to replace a number of IAM systems with Internet2 ITAP components. The Grouper component is one of the first to be investigated for adoption as it requires the fewest pre-requisite changes before it can provide a visible benefit for the program.

The first phase of deployment is to supplement existing NIS/LDAP groups, which are maintained using manual/scripted process today. 

Goals include:

• Provide automation around affiliation status events
• Provide web services interface or loaders for managing experiment groups
• Provision groups to Active Directory
• Eventual retirement of NIS (YP commands)