130 likes | 231 Views
Advanced CAMP Philadelphia, June 2009. Edré Moreira Wilton Caldas Osvaldo Carvalho Federal University of Minas Gerais, Brazil CAFe Federation. EID´s Role in IAM. Features. Metadirectory Flexible and easy definition of data models
E N D
Advanced CAMP Philadelphia, June 2009 Edré Moreira Wilton Caldas Osvaldo Carvalho Federal Universityof Minas Gerais, Brazil CAFeFederation
EID´s Role in IAM Advanced CAMP
Features • Metadirectory • Flexible and easy definition of data models • ETL (Extract, Transform and Load) tools for simplified conection to Source Systems • Pluggable algorithms for • Unification for data coming from various sources • Record deduplication • Flexible export to LDAP • Group management Advanced CAMP
EidObject • Everything in Eid is an EidObject • An EidObject is nothing but a Global Unique Identifier • An EidObject is linked to various EidClass Advanced CAMP
EidClass • Each EidClass is a collection of user defined attributes: • Student data, Faculty data, Address data, Email attributes, Group membership data, ... • For each EidClass you may plug an unification algorithm to manage data from more than one source Advanced CAMP
Data Repositories • Source or Target data • Source data may be relational DB or text file • Target is EID database • User defined mapping of source to target fields • You may plug a transform script Advanced CAMP
Process Management • A process extracts data from source systems • For each registered process, you define: • The set of extractions to be done • Execution order (important for integrity constraints) • Scheduling parameters, including frequency and time windows • Error recovering actions • EID allows for process execution monitoring Advanced CAMP
EID2LDAP • Automatic LDAP feed with data from metadirectory (attributes, groups, ...) • XSLT based, adapts to any LDAP schema Advanced CAMP
Group Management • Groups are SQL defined • (we´ll offer a better interface) • Groups are exported to LDAP Advanced CAMP
How to use EID • Install EID • Define your EidClasses • Register your source systems • Register, configure and schedule your processes for data extraction • Configure xslt for your LDAP schema • You´re in production: monitor your processes, manage classes, source systems, processes, groups Advanced CAMP
Where we are • In production in 7 federal brazilian universities • Next steps: • English and Spanish versions • Namespace, password and certificate management • Guest management Advanced CAMP
THANKS • Bob Morgan, Ann West • Our Sponsors RNP – National Education and Research Network SESU – Secretary of Higher Education, Brazil UFMG – Universidade Federal de Minas Gerais Advanced CAMP
More Information • SourceForge, look for “eid” • CAFe Federation Project • http://www.rnp-eaa.ufc.br • Grupo São Tomé • http://www.lcc.ufmg.br/saotome • edre@ufmg.br • osvaldo@dcc.ufmg.br Advanced CAMP