![Page 1: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/1.jpg)
NCEdCloud IAMOverview Presentation
![Page 2: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/2.jpg)
Key TermsNCEdCloud is the initiative responsible for providing services that include Identity & Access Management and Data Management
IAM-MS was the term for describing the service providing Identity & Access Management which is now called NCEdCloud IAM
![Page 3: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/3.jpg)
GoalsProvide LEA faculty, students, parents and guests with a single login to all NCDPI sponsored systems as well other cloud systems that are utilized by numerous LEA's.
Provide self service capabilities to all end users and delegation capabilities to all LEA administrators.
![Page 4: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/4.jpg)
Key OrganizationsNCDPI - NCEdCloud Sponsor
Friday Institute - NCEdCloud Program Manager
MCNC - NCEdCloud Service Manager
Identity Automation - NCEdCloud IAM Service Manager and Provider
![Page 5: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/5.jpg)
Core TeamSamuel "Sammie" CarterFriday InstituteNCEdCloud Service Manager
Steve ThorpeMCNCNCEdCloud IAM Systems Analyst
Mark ScheibleMCNCNCEdCloud IAM Systems Analyst
Steve HatchIdentity AutomationNCEdCloud IAM Service Manager
Troy MorelandIdentity AutomationNCEdCloud IAM Service Architect
![Page 6: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/6.jpg)
Support Model
![Page 7: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/7.jpg)
User StatisticsInitial Scope:Faculty: ~250KStudents: ~1.5M
Future Scope:Guardians: ~3MGuests: Unknown
![Page 8: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/8.jpg)
NCEdCloud IAMThe NCEdCloud IAM infrastructure will be hosted in Amazon's AWS environment. This service provides unlimited scaling as well as a world class high availability platform.
![Page 9: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/9.jpg)
NCEdCloud IAMInfrastructure, systems, services and resources responsible for providing the IAM-MS.
Services Provided:● My NCEdCloud● NCEdCloud SAML IdP● NCEdCloud Sync
![Page 10: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/10.jpg)
NCEdCloud IAMMy NCEdCloud
(http://my.ncedcloud.org)
The interface for end users and administrators that will provide self service and delegated administration capabilities.
This service runs on Identity Automation's Access Request Management System (ARMS) product.
![Page 11: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/11.jpg)
NCEdCloud IAMNCEdCloud SAML IdP
The service that will provide sign-on capabilities to cloud systems that support the SAML protocol and implementation.
This service runs on Identity Automation's Federated Identity Management System (FIMS) product.
![Page 12: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/12.jpg)
NCEdCloud IAMNCEdCloud Sync
The service responsible for managing the lifecycle of account management across all systems. (e.g. create, update, delete accounts)
This service runs on Identity Automation's Data Synchronization System (DSS) product.
![Page 13: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/13.jpg)
NCEdCloud IAMNCEdCloud Username
The login for the NCEdCloud is referred to as the NCEdCloud Username. Based on numerous constraints, an NCEdCloud Username will be a randomly generated value with 4 alpha characters followed by 4 digits.
e.g. fqbr4159
![Page 14: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/14.jpg)
NCEdCloud IAMCore Systems
Core systems of NCEdCloud IAM:● Person Registry● Central Directory
![Page 15: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/15.jpg)
NCEdCloud IAMPerson Registry
The Person Registry is a component of the core infrastructure that provides an identity data warehouse for NCEdCloud IAM. This registry is responsible for matching, merging and cleansing of data as it comes from the source.
![Page 16: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/16.jpg)
NCEdCloud IAMCentral Directory
The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud IAM. The Central Directory is the authoritative source for the NCEdCloud Username and password. It is also the source of all target system integration whether by SAML, LDAP or direct provisioning.
![Page 17: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/17.jpg)
NCEdCloud IAMTarget System Integration
Integration with target systems comes in three flavors:
● SAML● Synchronization● LDAP
The capabilities of the target system dictates the type of integration used.
![Page 18: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/18.jpg)
NCEdCloud IAMTarget Systems
By March 2014:● Google Apps for Education● Central Directory Local Replica● Zscaler● Follet Destiny● Discovery Education
![Page 19: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/19.jpg)
NCEdCloud IAMCentral Directory Local Replica
![Page 20: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/20.jpg)
NCEdCloud IAMGoogle Apps Integration
![Page 21: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/21.jpg)
NCEdCloud IAMZscaler Integration
![Page 22: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/22.jpg)
NCEdCloud IAMFollet Destiny Integration
![Page 23: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/23.jpg)
NCEdCloud IAMDiscovery Education
![Page 24: NCEdCloud IAM - MCNC IAM Overview.pdfNCEdCloud IAM Central Directory The Central Directory is a component of the core infrastructure that provides a directory service for NCEdCloud](https://reader036.vdocuments.site/reader036/viewer/2022081612/5f167b831ae44e2754007bec/html5/thumbnails/24.jpg)
NCEdCloud IAMNCEdCloud IAM Support Portal
(http://support-iam.ncedcloud.org)
The interface for administrators that will provide service catalog requests for exception handling.