Changes between Version 2 and Version 3 of Phase1Planning

Timestamp:

07/09/12 11:40:10 (12 years ago)

Author:

dabantz@…

Comment:

--

Phase1Planning

@@ -49 +49 @@
 - Install and configure Shibboleth SP if not already installed by UA.
 - IdP should release the uid or eppn attribute to the SP.  If releasing eppn, is that attribute available in the production LDAP?
+''ePPN is built in the IdP from UA Username''
 
 3. Set up jobs to load data into Grouper from LDAP.
@@ -54 +55 @@
 - Set up the Grouper Loader to load buildings into Grouper under ua:inst:buildings using data from the production LDAP.
 - What attribute contains the user's building?  Is the attribute multi-valued?  Are all buildings being populated into Grouper or a subset?
+''May as well generate all building-based groups; standard officeLocation attribute in LDAP is populated with a room number and controlled vocabulary building abbreviation, though there are a small number exceptions generated by individuals entering a building name in the room designator entry field instead of choosing from the pre-populated list of buildings.''
 - Are the values of the attribute the exact name to use as the Grouper groups?  Or does there need to be some mapping or parsing done?
+''Need to strip pre-pended room designation; may wish to include campus in the group name''
 - How often should the job run?  Hourly?  Daily?  Probably depends on how long it takes to run the LDAP query and how many users there are.