Provisioning and Integration (P&I) challenges are urgent across HE & R communities

• P&I projects are everywhere
  • New open source registry deployments (CPR and OR) at multiple institutions are anchor tenants for IAM infra and must be wired in for P&I
  • Grouper deployment projects abound, driving new models of managing service eligibility
  • Numerous campuses are on verge of deploying major commercial offerings in this space (OIM, etc.)
  • Meanwhile COmanage, CoCoA and SURFconext packages are targeting Research VOs (complementing institutional focus elsewhere)

• HE & R community can take full advantage of the range of current activity IFF we
  • Articulate a common functional framework within which we can discuss P&I use cases and requirements (in progress)
  • Capture use-case driven requirements across an identified set of projects
  • Document solutions emerging from these projects
  • Highlight successful aspects of specific projects to guide next round of institutional or VO projects

• We already have adequate resources to shepherd this work (additional resources would accelerate progress)

What's in the Open Source P&I tool chest today?

• Change-driven messaging from identity registries (CPR and OR) and Grouper
  • ActiveMQ in CPR, explorations w Grouper (including SCIM)
  • Amazon SQS, SNS as alternatives to ActiveMQ for queuing and notifications (UDub)
  • Camel routes in OR (Camel: runnable/configurable Enterprise Integration Patterns)
• Feeding the Identity Registries from the Systems of Record
  • Batch approach for OR (Rutgers own and Unicon-developed Spring Batch for UC Berkeley OR)
  • Batch and API approaches to SOR integration in CPR
  • CIFER SOR-to-Registry APIs
• RESTful push/pull APIs from registry (CIFER)
  • SCIM flavor for cloud services & similar cases
• Provisioning engines
  • OpenIdM (ForgeRock) investigations at CPR & Stanford
    • Shareable connectors for specific provisioning targets
    • Extension points:
      • Camel "routes"
      • Activiti for workflows involving humans
• Investigation/Experimentation stage:
  • ESB: Mule
  • Rules engine: Drools