SGHE Summit – Banner Enterprise Identity Management (BEIS)

SGHE Summit – Banner Enterprise Identity Management (BEIS) – Dan Sterling and Mark B

Definitions (Identity Management in Action)

• Provisioning (Create IDs)
• Authentication (AuthN) – is the user allowed to access the system
• Authorization (AuthZ) – is the user allowed to access services within the system

Identity Mgmt in Banner ODC

• Standardization
• Banner Database Components
• Middle Tier Components
• Provisioning Support and Architecture
• Authentication Architecture
• Authorization Architecture

IDM Goals

• adopt a standard UDC Identity definition with UDC Identitfier (GUID for SGHE apps)
• support user provisioning from Banner
• support user provisioning to SGHE apps

Common Identity Definition

• foundation of BEIS architecture is common
  • using W3C XML Schema – using SPML and HR XML standard
    UDCIdentity some of the data can be mapped to eduPerson attributes
• if you license any Banner product you can download, install and use BEIS without any licensing

Software Prerequisites

• Banner General 8, Intcomp 7.3.0.1, Oracle 10gR2 DB and App Server
• Data mining via Oracle Streams and Advance Queuing
• Banner Streams Capture and Apply API – gp_streams_utils
• Banner Streams Metadata Form – guasadm
• Banner General Rules Form – gorrsql
• CAS 3.2.1.1 and 3.3.1.1

Identity Data Export Utilities

• UDCIdentifier Assigner
• UDCIdentifier Extractor
• LDIF Generator
• SPML LDAP Adapter

Authentication Support

• local native authn
• ldap authn
• claims based authn – applications are configured to not authn and accept an assertion (CAS is an example)

Supported are INB, BSS, Travel & Expense, BDMS

Related posts:

1. SGHE Summit – Electronic Banner Access Request (eBAR) Workflow
2. You know when you’ve moved into management when …
3. Canadian Colleges Update – Dec 2009 Session 5 Microsoft’s Virtualization Strategy and Futures
4. SGHE Summit – Millennial, Metrics and the New Media
5. SGHE Summit – An Efficient Means for IT Planning