BCNet IDM Workshop – Primary Candidates for Identity Stores @TRU

Hugh Burley

Novell – eDirectory, Identity Manager, LDAP, Radius

Oracle – SGHE Banner, Luminis, Oracle Identity Management

The Current Workflow at TRU

• 3 paths – email path in Novell, other system access via system admins and Human Resources and Student Information System via Oracle IDM provisions Luminis portal product
• its the other system access that is a challenge – it is paper based with signatures (ASAR process)

Problems

• many vendors don’t work with eDirectory, Novell continues to lose their customer base
• ASAR process is slow and prone to error – results in privilege creep and incomplete access removal on termination
• What is working is the Banner/Oracle stack for staff and students which automatically provisions to the Luminis portal

Future

• implement Active Directory solve some of the problems with Novell and ASAR
• still plan on using Novell Identity Manager to provision Active Directory going forward
• **NOTE : BCIT had to pull out Novell IDM due to extremely poor performance with group changes as well as running into a 5000 member group limit (BCIT has needs for groups that are orders of magnitude larger

Related posts:

1. BCNET IDM Workshop – Oracle IDM
2. BCNet IDM Workshop – Identity and Access Managment @ UBC
3. BCNET IDM Workshop – BC Provincial IDM Project
4. BCNET IDM Workshop – BC Campus IDM Initiatives
5. BCNet IDM Workshop – SFU LDAP, CAS, Shibboleth and OpenRegistry (Oh My!)