Grouper Developers Forum

[Tom Zeller <>]

> If I'm using the PSP for provisioning Grouper groups to AD, would it be 
> possible to have a second PSP for the reconciliation of AD groups in 
> Grouper ? From what I understand, there would be conflicts in the 
> configuration. Maybe they could both run if they were on two separate 
> machines.

I suggest multiple psp configuration directories rather than machines.

For grouper to serve as a group registry, it will likely need to
consume groups managed authoritatively outside of grouper (e.g. from
AD) as well as provision groups authoritatively (e.g. to AD). An
application might use AD as a system-of-record for authorization
groups, and these AD system-of-record groups may be useful elsewhere,
such as a non-AD directory for mail routing.

TomZ