Grouper Developers Forum

[Tom Barton <>]

Tom,

Two questions, then a thought.

Will the Target Federated Grouper's Grouper Connector make SPML requests 
(a pull model), or will the source Grouper (gsh) make the SPML requests 
for the Target Federated Grouper?

Assume that the Target Federated Grouper is operated by an organization 
distinct from the Grouper at the left of the diagram. How should the 
federated agents - Target Federated Grouper's Grouper Connector and 
Ldappc's PSP - establish connections, ie, identify and authenticate each 
other, and secure the SPML in some fashion?

The thought is that this diagram, or something much like it, seems like 
a reasonable representation of an architecture of the sort that SPMLv3 
ought to implement. Also, Ldappc's calc, diff, and sync operations are 
valuable provisioning capabilities to have, as I know you know from many 
years of experience at U Memphis. It'd be great to have those on some 
SPMLvN roadmap.

TomB

On 8/26/2010 10:02 AM, Tom Zeller wrote:
> I've updated the wiki with an image of how federated groups might be
> provisioned through ldappcng :
>
> https://spaces.internet2.edu/display/GrouperWG/LDAPPC-NG+Development
>
> The work that needs to be done includes (1) converting Grouper
> changelog entries to spml and (2) writing the spml-to-Grouper
> connector, both of which should be straightforward.
>
> Feedback ?
>
> TomZ