1. Directory Services Project University of Colorado at Boulder

2. Directory Goal: Trusted, authoritative data source CU Person HR (fac/staff) SIS (student) Idcard (ISO) Telecom (where) FIS (faculty) Uniquid (accounts)

3. Directory Goal: Identity and relationship management CU UUID HR (EmpID) SIS (SID) Idcard (ISO) Telecom (tele#) FIS (SSN) Uniquid (unixID)

4. Directory Goal: Usable by applications & services Directory White Pages Active Dir. CalendarUPortalIDCard EMail Secure Netwkg

5. Directory Goal: Authentication services 2. Authenticate (who), via ID & password, to trusted mechanism 3. Determine Affiliation (what) 4. Grant ticket/cookie (with who/what) 5. Pass ticket to desired application 1. Initial request. Redirect to authentication service 6. Request add’l attributes as needed client Applications AuthN Services Directory trusted authN

6. Directory Services – Overview Structure

7. Directory Services – Registry H/R SIS TELE FIS UNIQUID ID CARD etc. LDAP enabled application(s) Registry Update logic Reconciliation Manual entry Oracle Affiliation Registry

8. Directory Services - Directory Oracle Affiliation Registry Create directory instances UCCS Directory UCB Directory CUSYS Directory UCD Directory UCHSC Directory CU Directory

9. Send Mail Directory Services - Services UCB Directory UCB Active Directory AuthN Fall 2001 Calendar Winter 2001 Portals White Pages Fall 2001

10. Project Contacts  Paula Vaughan, Project Manager Paula.Vaughan@colorado.edu  Project Web Page from the UCB - ITS home page (“About ITS”  “Projects & Initiatives”  “Architecture and Infrastructure Initiatives”) or directly via: http://www.Colorado.EDU/committees/DirectoryServices/