The schools that are now slightly more appropriate have their own unified identity, and teachers and students use a set of account codes to access teaching services, mailboxes, libraries. WiFi has a separate account if it is necessary to register. Teachers and students are troubled, but managers are also tired."Connect"Behind the two words, there are lots of holes. This is about the practical details we've stepped on and seen.
Confirm what interface is the U.N.I.A. to first.
Not every school has a uniform identity. Some walk the standard, some use CAS, some use OAuth2, and others simply develop a whole collection of interfaces. The billing system must get an interface type and support agreement before it is negotiated. We've seen a college that wrote its own certification ten years ago."Support standard agreements", which actually only gives one web-based form access and ends with a reverse proxy docking, with poor stability. So the first step is not to write code, but to get the information department to produce a white paper on the interface between certification systems, and to assess feasibility together.
The account sync is more difficult than a single login.
A lot of people think that's the connection."We can log in with the Quaker."The problem is that the accounts are synchronized. New-born enrolment, graduates leaving school, and staff mobility. How do these changes go to the system? If you just check logs, without synchronizing account status, there will be a graduate account number that can still be connected to the Internet and the student who left school is not stopped. It is safe for the system to take the list of people from the unified identity certificate at times, compared to local accounts, and automatically open new accounts and leave schools.
How to map billing and authentication accounts
Uniform identification only."Who are you?"The billing system is still working."How much did you spend?"The matching time is not the same. The map is set up in a system of billing: which fee account is the student number, which rate group is it, or for free or for payment. Teachers default to use the office line, students to bind their dormitories by default, and visitors to make temporary accounts. This map rule is made with the student, financial confirmation, better configured than written down in code. We suggest that rates be placed directly on personal attributes, for example."Student dormitory"The label automatically applies a monthly rate of the package, reducing manual intervention.
The responsibility for the problem is to say before.
Any link is compromised by the connection. The authentication system has been upgraded, the interface field changed and the billing system has been misdefined. Before building it, we have to agree who will monitor the docking links, which side of the chain will be checked first, and what response time frame will be. We suggest that both parties keep the logs and authenticate side records."Never tested it.", billing side record"What did you do when you got the identity?"If you have a student complaint, you can quickly identify whether the certification is wrong or whether the calculation logic is wrong. Without this cut, it is either push each other.
Don't put visitors and out-of-school personnel in the same certification.
The uniform identification covers only students and teachers in the school, but there are often outsiders: specialists who come to the meeting, graduate students who visit the school, parents who visit. These people do not have a study number, they cannot go to the unified certification. The billing system is designed to maintain an independent provisional account that will issue a time-bound account for visitors, which automatically expires."Uniform"The temporary account system is more relaxed when it is done alone.
The main thing about matching the U.S.I. is to get a billing system."Borrow."The school's identity system, not its own. Think about the interface type, account synchronization, rate mapping, and responsibility severing, so that the docking does not become a long-term nightmare. Behind the teacher/student student number one is the fact that these details are being polished first.
Someone's gotta be watching the synchronization log when you get online.
The interface is not a one-time event, but a long-run link. We suggest that the information sector integrates account synchronisation tasks into daily surveillance and looks at whether the last sync has been successful or failed. Many schools have done well on the match, and the authentication system has quietly changed fields after six months of operation, and the sync starts to fail before it can be detected. This risk can be avoided by looking at the logs.
Don't try to get in there. First you go and then you go.
Some schools have to come up here."NATHHELL_SEAMLESS_AUTH + Automated Rate (ATM) and Self-Help Untie"It's done, and the symmetry is long and slow. We prefer two: first part"The Quest number can be login and properly billed."Run through, let the students and teachers use it first; second, no senses, self-help management, etc., are optimized."Where's the account number?"And, to make this a reality, the rest of the experience is just a little bit more.