Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

 

> 

> •          What usage scenarios are you using Grouper to solve?

 

Centralized authorization and people lists.  We are decentralized so it’s difficult to exactly know.  We have a lot of apps driven by Grouper.  And we are starting to at least sync authorizations into grouper for apps who don’t drive from grouper.

 

> 

> •          How does Grouper fit into your environment?

 

3 UI nodes, 5 WS nodes, LDAP, SAML, change log messaging (grouper built in and AWS), SQL feeds.  We also have a WS node off-site with a readonly synced database (oracle dataguard)

 

> Do you also run another authorization management app?

 

No

 

> Did Grouper displace an existing centralized authorization management application?

 

No, we had authorization in a framework that stored things in those applications.  So applications didn’t need to code their own groups/memberships, but it wasn’t centralized.

 

> 

> •          What integrations have been integrated with Grouper?

 

We had LDAP provisioning before LDAPPC (or ldappcng, or psp), and haven’t switched to psp.  We do use PSP to sync to AD (not a lot of groups).  We use the duo connector, Atlassian, and others.

 

> 

> •          What customizations to Grouper have you applied? Custom UI?

 

I think a couple schools made a simple UI on the WS, but Im not sure.  Centrally we don’t have one.

 

> 

> •          What EFT is used to maintain? What’s the EFT’s skillset to run/maintain

> Grouper?

 

Java programmer: 20%, data analyst for loader queries, 5%, small slice of sysadmin/dba.

 

> 

> •          How long do you retain your audit/point in time tables? What is your

> current database size?

 

So far indefinitely, though we will soon be deleting point in time of deleted objects 5 years or older, and deleting audits with not user associated (e.g. loader) 5 years or older.  Database tables are 20 gigs.  Not sure about indexes or other things. 

 

 

 

> 

> Feel free to reply directly to me or back to the list (probably preferable so

> others can benefit, but understandable if you choose not to).

> 

> Thanks very much,

> John

> 

> --

> John Gasper

> IAM Consultant

> Unicon, Inc.

> PGP/GPG Key: 0xbafee3ef

>

>