ASAP

TM

The University of Tennessee Project IRIS

Lightweight Directory Access Protocol (LDAP) and Networ Identifier

This doc!"ent defines a #ro#osed interface $etween the SAP R%& IRIS syste" and the LDAP directory' Data needed for #o#!lating the directory( "aintaining the directory( and #roviding feed$ac to the SAP R%& IRIS syste" are identified'

/var/www/apps/conversion/tmp/scratch_2/189275950.doc Page !1

ASAP

TM

LI)*T+,I)*T DIR,-T.R/ A--,SS PR.T.-.L (LDAP) AND N,T+.R0 ID,NTI1I,R (N,T ID)
"#AP!re$ers!to!a!standard!protoco%!$or!director&!service!so$tware.!!The!'niversit&!is!in! the!process!o$!rep%acing!o(r!aging!P)!director&!service!with!an!"#AP!*ersion!+.,comp%iant!prod(ct.!!The!new!"#AP!so$tware!wi%%!provide - .hite!pages!services!/0ame1!phone1!address1!e-mai%2 - A(thoritative!e-mai%!$orwarding!data3ase - A(thentication!and!a(thori4ation!$or!networ5!3ased!services - A!data3ase!design!that!is!e,tensi3%e!and!provides!more!$%e,i3%e!!privac&! protections!$or!(ser!data - A!rep%ication!scheme!to!provide!ro3(st!and!red(ndant!service A!5e&!e%ement!to!the!"#AP!a(thentication!process!is!the!0etwor5!6denti$ier1!or!0et!6#.!! This!re$ers!to!a!(ser!%og-in!6#!assigned!to!a!mem3er!o$!the!'niversit&!comm(nit&!$or!(se! when!e,ec(ting!'T!internet-3ased!app%ications.!!7ach!$ac(%t&1!sta$$!and!st(dent!as!part! o$!his/her!o$$icia%!record!wi%%!3e!assigned!a!0et!6#!to!a%%ow!a(thenticated!access!$or!a%%! e%ectronic!correspondence!and!e-commerce!activit&!3etween!the!'niversit&!comm(nit&! and!'niversit&!we3-3ased!app%ications. Associated!with!the!0et!6#!is!the!creation!o$!an!o$$icia%!e-mai%!address.!!This!address1! a%so!a!part!o$!a!$ac(%t&1!sta$$!or!st(dent8s!o$$icia%!record1!wi%%!a%%ow!the!'niversit&!to! send!o$$icia%!correspondence!(nder!the!same!set!o$!ass(mptions!as!those!app%ied!to! posta%!addresses. A%%!0et!6#!in$ormation!wi%%!reside!in!the!"#AP!director&.!!9wnership!o$!the!$ac(%t&!and! sta$$!0et!6#!wi%%!reside!with!)(man!:eso(rces!in!the!SAP!6:6S!s&stem.!!9wnership!o$! the!st(dent!0et!6#!wi%%!reside!with!Admissions!;!:ecords!as!<(st!another!piece!o$! o$$icia%!st(dent!in$ormation. The!'niversit&!wo(%d!%i5e!to!imp%ement!a!sing%e!a(thoritative!so(rce!$or!networ5! a(thentication!and!e-mai%!$orwarding.!!To!this!end!the!SAP!pro<ect!imp%ementation!team! has!3een!approached!and!as5ed!to!consider!certain!re=(irements!$or!a!sing%e!director&! services!so%(tion.

/var/www/apps/conversion/tmp/scratch_2/189275950.doc Page !2

ASAP

TM

)eneral +hite Page Infor"ation Needed

6n!order!to!%oad!the!new!"#AP!director&!with!the!same!in$ormation! avai%a3%e!in!the!c(rrent!P)!director&!compara3%e!e%ements!$rom!the!SAP! ):!mod(%e!wi%%!need!to!3e!passed.

Pro#osal2!!A!(ser!e,it!within!SAP!sho(%d!3e!(sed!to!pass!the!$o%%ow!data!to! "#AP!director&!service!whenever!director&!in$ormation!is!(pdated 7mp%o&ee!0ame!/"ast1!>irst!Midd%e2 7mp%o&ee!Tit%e 7mp%o&ee!#epartment 9$$ice!Phone 9$$ice!Address )ome!Phone )ome!Address Stat!s -hange Notification An&!time!an!emp%o&ee8s!stat(s!changes!within!the!SAP!):!mod(%e!that! in$ormation!sho(%d!3e!distri3(ted!to!other!s&stems!that!have!need!to!monitor! s(ch!activit&.!!This!wi%%!inc%(de!additions!o$!new!emp%o&ees1!remova%!o$! terminated!emp%o&ees1!and!changes!to!the!stat(s!o$!active!emp%o&ees!or! in$ormation!a3o(t!them. 7mp%o&ee!creation .hen!a!new!emp%o&ee!acco(nt!is!created!within!the!SAP!):!mod(%e!certain! minima%!in$ormation!sho(%d!3e!passed!a%ong!to!an!e,terna%!process!that!can! generate!the!(ni=(e!0etwor5!6#!/see!the!ne,t!section2. Pro#osal2!!A!(ser!e,it!within!SAP!sho(%d!3e!(sed!to!pass!the!$o%%owing!data!to! an!e,terna%!process!that!wi%%!generate!a!0et!6#!$or!(se!3&!the!"#AP!director&! service 'niversit&!6# 7mp%o&ee!0ame!/"ast1!>irst!!Midd%e2 7mp%o&ee!Tit%e 7mp%o&ee!#epartment 7mp%o&ee!?ategor& 7mp%o&ee!Stat(s 7mp%o&ee!Percent!>(%%!Time @(siness!'nit!/camp(s2 :esponsi3%e!Acco(nt 9$$ice!Address 9$$ice!Phone )ome!Address )ome!Phone

/var/www/apps/conversion/tmp/scratch_2/189275950.doc Page !+

ASAP

TM

The!(ni=(e!0et!6#!a(thori4ation!in$ormation!and!white!pages!data!wi%%!3e!passed! to!the!"#AP!director&!$or!immediate!entr&.!!A!dai%&!3atch!process!wi%%!ret(rn!the! 0et!6#!in$ormation!to!SAP!$or!(pdate!in!the!):!mod(%e. 7mp%o&ee!#e%etion .hen!an!emp%o&ee!is!terminated!within!the!SAP!):!mod(%e!the!termination! in$ormation!sho(%d!3e!passed!thro(gh!a!(ser!e,it!to!the!"#AP!director&!to!3e! re$%ected!in!the!director&.!!6n$ormation!on!terminated!emp%o&ees!remains!in!the! director&!$or!one!&ear!3e$ore!3eing!removed.!!Termination!sho(%d!3e!treated!as!a! change!o$!emp%o&ment!stat(s1!as!covered!in!the!ne,t!section. ?hange!o$!7mp%o&ment!Stat(s .hen!an!emp%o&ee8s!emp%o&ment!stat(s!changes!in!s(ch!a!wa&!that!it!wo(%d! a%ter!the!origina%!access!to!in$ormation!granted!to!that!emp%o&ee1!the!in$ormation! sho(%d!3e!passed!thro(gh!a!(ser!e,it!to!the!"#AP!director&!$or!immediate! (pdate. Pro#osal2!!The!$o%%owing!data!is!re=(ired!$or!a!s(ccess$(%!(pdate!o$!the! emp%o&ee8s!"#AP!in$ormation 'niversit&!6# 0et!6# The!emp%o&ee!$ie%ds!that!are!changed Real3Ti"e vs' 4atch U#dates 6n!order!$or!the!"#AP!director&!services!to!3e!o$!3ene$it!to!the!'niversit&! comm(nit&!it!m(st!3e!5ept!as!c(rrent!as!possi3%e.!!The!most!desira3%e!(pdate! $re=(enc&!is!rea%-time!processing.!!'nder!this!scenario!a!change!occ(rring!in!the! SAP!):!mod(%e!wi%%!3e!sim(%taneo(s%&!re$%ected!in!the!"#AP!director&.!!6$!that!is! not!$easi3%e!then!3atch!(pdating!can!3e!made!to!wor5!i$!the!$re=(enc&!o$!the! (pdates!are!no!$ewer!than!ever&!15!min(tes. Pro#osal2!!SAP!sho(%d!provide!(pdated!in$ormation!to!the!"#AP!director&!on!a! rea%-time!3asis. User ,5its SAP!provides!$or!(ser!e,its!where3&!comm(nication!can!occ(r!3etween!SAP! and!e,terna%!s&stems.!!6t!is!anticipated!that!these!(ser!e,its!wi%%!3e!emp%o&ed!to! provide!time%&!SAP!data!to!the!"#AP!director&!processes. Pro#osal2!SAP!wi%%!(ti%i4e!(ser!e,its!to!provide!an!e,it!and!entr&!point!$or! e,changing!data!with!the!"#AP!director&. ,"erit!s ,"#loyees( 6ero Percent ,"#loyees ?(rrent%&!the!P)!director&!is!receiving!a%%!emp%o&ee!stat(s!codes!e,cept!A0981! which!is!a!c(m(%ative!code!$or!a%%!non-active!emp%o&ees.!!7mp%o&ees!who! contin(e!wor5ing!$or!the!'niversit&!(nder!an!7merit(s!stat(s!sho(%d!3e! processed!as!a!reg(%ar!emp%o&ee!and!not!%i5e!a!retired!emp%o&ee.!!The&!sho(%d!

/var/www/apps/conversion/tmp/scratch_2/189275950.doc Page !B

ASAP

TM

not!3e!re=(ired!to!renew!an&!'niversit&!services!on!an!ann(a%!3asis1!as!retired! emp%o&ees!c(rrent%&!m(st!do.!!6n!order!to!accomp%ish!this!distinction!the!SAP!):! mod(%e!wi%%!need!to!di$$erentiate!non-active!emp%o&ees!in!a!wa&!that!a%%ows!$or! the!identi$ication!o$!emerit(s!emp%o&ees. 7mp%o&ees!on!4ero!percent!appointments!are!not!3eing!passed!to!the!P)! director&.!!SAP!sho(%d!pass!in$ormation!on!4ero!percent!emp%o&ees!to!the!"#AP! director&!at!the!same!time!it!passes!in$ormation!on!other!active!emp%o&ees. Pro#osal2!!The!SAP!):!mod(%e!sho(%d!di$$erentiate!with!a!separate!stat(s!code! those!retired!emp%o&ees!who!contin(e!wor5ing!(nder!an!7merit(s.!!7merit(s! emp%o&ees!sho(%d!3e!treated!as!reg(%ar!emp%o&ees!$or!the!p(rposes!o$!(sing! 'niversit&!services. Privacy Iss!es The!"#AP!director&!service!is!re=(ired!to!maintain!the!privac&!%eve%!re=(ested!3&! the!$ac(%t&1!sta$$!or!st(dent.!!6n!order!$or!that!to!3e!accomp%ished!the!SAP!):! mod(%e!m(st!provide!re=(ested!data!in!a!$ormat!where3&!individ(a%!$ie%ds!can!3e! t(rned!Con!or!o$$D!3ased!on!the!privac&!setting!in!$orce!3&!the!individ(a%. Pro#osal2!!SAP!sho(%d!provide!the!con$identia%it&!$%ags!re=(ired!$or!"#AP! $i%tering!or!ma&!pre-$i%ter!data!passed!to!the!"#AP!director&.!!)owever1!i$!the! individ(a%!sta$$!or!$ac(%t&!mem3er!has!re=(ested!con$identia%it&!o$!the!entire!entr&1! a!minima%!set!o$!in$ormation!m(st!3e!sent!inc%(ding 7mp%o&ee!0ame!/"ast1!>irst!Midd%e2 'niversit&!6# 7mp%o&ee!Tit%e 7mp%o&ee!#epartment 7mp%o&ee!?ategor& 7mp%o&ee!Stat(s 7mp%o&ee!Percent!>(%%!Time @(siness!'nit!/camp(s2 :esponsi3%e!Acco(nt ?on$identia%it&!>%ag Net ID and ,"ail in SAP >or!e$$iciencies!in!comm(nicating!e%ectronica%%&!to!%arge!segments!o$!the! 'niversit&!comm(nit&!the!SAP!):!mod(%e!m(st!3e!a3%e!to!store!the!0et!6#!and! 7-mai%!created!3&!the!"#AP!a%gorithm!process.!!This!data!wi%%!not!re=(ire! maintenance!within!SAP.!!!Po%icies!wi%%!re=(ire!a!specia%!administrative!remed&! $or!(sers!who!re=(est!a!change!to!the!0et!6#.!!This!t&pe!o$!change!wi%%!occ(r! (nder!the!same!g(ide%ines!(sed!$or!SS0!changes. Pro#osal2!!The!SAP!):!mod(%e!wi%%!store!the!0et!6#!created!$or!the!"#AP! director&.

/var/www/apps/conversion/tmp/scratch_2/189275950.doc Page !5