Enterprise Directory

The Enterprise Directory is the next generation of the current Virginia Tech Directory also known as the VTLDAP. The new Enterprise Directory will be fully eduPerson 1.0 compliant allowing it to work with a wide range of applications developed for educational institutions. Along with the schema changes for eduPerson compliancy we are also introducing new features such as the ability to offer finer grained authorization and greater user control over their data. In addition to these new features, a wealth of tools will be released making interacting with the directory, either directly or programmatically, much easier. Also, with the creation of some of these new tools, and because of some of the changes being made to the structure of the directory, some of the current tools in production will be retired.

The components of the Enterprise Directory

Registry A clearinghouse for information from key enterprise systems or applications like Banner or the email system used to populate ED-Lite, ED-Auth, and ED-ID.
ED-Lite A public, anonymously accessible directory used for white pages related query.
ED-Auth A restricted directory used for user authentication and role based authorization.
ED-ID A restricted directory used for authorization based on fine grained attributes and groups.
Web Services Middleware Web services provide query and management services for ED data to arbitrary University applications in a secure and cross-platform manner.

General Documents

ED Usage Requirements This document outlines the rules a service must follow when interacting with ED-Auth and ED-ID.
PID account states This document describes the different states a PID may be in and the effects this has on authentication.
Person Affiliations Explained This document describes the two different affiliation attributes, eduPersonPrimaryAffiliation and eduPersonAffiliation, their possible values, what those values mean, and how these attributes should be used.

Other Resources

Middleware-Announce An unmoderated VT listserv where announcements dealing with additions and changes to the middleware systems are posted. Any user of any of Middleware's systems are expected to be subscribed to this list in order to be made aware of these announcements.

FAQ

Q: What is ED?

A: The Enterprise Directory (ED) is Virginia Tech's identity management system, providing information for authentication, authorization, application personalization, and business logic population. The ED consists of the Registry, ED-Lite, ED-Auth, ED-ID, and the business logic that ties all of these together.

Q: What is the Registry?

A: The Registry is Virginia Tech's central store of user data. In the context of ED-Lite, ED-Auth, and ED-ID, the Registry is their true backend, as data is pushed from the Registry to the ED-*s.

Q: Why are there separate ED-*s(Lite, Auth, ID)?

A: The ED project has several niches to fill: a quick, accessible whitepages directory (ED-Lite), a directory to do PID/pass authentication (ED-Auth), and a directory to provide more detailed user information for authorization (ED-ID).The ED-*s were split up to facilitate development and management and to make each niche more perspicuous to end users.

 
middleware/ed.txt · Last modified: 2009/10/07 17:17 (external edit)
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki