Enterprise Authorization Working Group - 2007/12/17 Meeting

Introductions and why each group would be interested in looking into the need for a campus-wide authorization service after the many discussions coming out of the LDAP and IS-3 groups
Each group discussed how they currently handle access controls into their applications
- AdCom - SAMS homegrown web application service solution for administrative applications
- NACS, Eng, ICS - local database joins to access control tables
- Communications - looking for something, possibly LDAP based, for the new CMS project
Each group described at a very high level how their systems work and high level requirements
Josh described the initial research he had done looking at Grouper/Signet, two open source projects by Internet2 that could possibly fit, and has as one of his 2008 goals to possibly replace SAMS with
- Questions he had were the user interface, batch uploading/mass changes, pluggable JMS output/notifications, web service interface
Beth noted the CMS project needs some solution by the Spring 2008 and would like to evaluate it sooner, however they have a Plan B for the CMS project if Grouper/Signet didn't work out

Public Documents