Informationsinfrastrukturen im Wandel. Changing ... - DINI

Hartmut Koke, Sebastian Rieger 303
linked identity pool. Adding to the selective replication of identities, this
process includes conversion and adaptation of related information between
the different origin and target systems. The Meta-Directory also transmits
context data like transaction numbers (TAN) between different applications.
Figure 1 shows an example for the synchronization of identities in
Göttingen. An identity is created in an Active Directory Forest in department
3-7 (GB 3-7 IT) of the university hospital. It is selectively synced
through the Meta-Directory of the GÖ*-project. The new user gets an email
account in the GWDG exchange system if his identity is accepted or
the user will be provisionally put up within the GB 3 IT or in other systems.
Lock attributes and the definition of separate identity containers for exchange
enable selective synchronization of, for instance, sensitive information
without centralizing data within the meta-directory.
GWDG
LDAP ADS
GB 3-7 IT Meta-Directory
Exchange
ADS ADS
GÖ*
SUB, Uni-DV, ...
Figure 1: Corporate Identity Management in Göttingen
The GÖ* project advances the pragmatic implementation of Identity
Management (IDM). The Meta Directory and other IDM-approaches like
Virtual Directories are central gateways for the successive integration of
further systems. In the past, many IDM projects in science and economy
could not be completely realized due to the complexity of the already complete
integration of all systems. GÖ*, on the other hand, integrates further
systems step by step. Therefore, solutions that already exist can be used. In
particular, it can also be determined whether already existing systems can
fulfill the functions of those to be newly integrated. In this case a connec-