The school system is often more than one: in the teaching system, a teacher's account is in the personnel system, and a cartoon has its own database, library, OA are in one. If WiFi at campus opens another separate account, there are too many code numbers to keep, and it is very difficult for administrators to maintain multiple accounts."A set of identities available everywhere."The problem.
NatShell V7 Authentication & Billing supports LDAP authentication and third-party data source certification: LDAP can be combined with Windows domain certification, which allows for uniform identification and permission to be issued; third-party data source validation can be used for a subsequent cartoon, OA, any third party database, and ID based card-spaking authentication.
One cartoon docking: unified identity and flat fees
The value of a cartoon interface is most direct in the campus fee-for-service scenario. After V7 docks with a cartoon on campus, students can authenticate the Internet using a cartoon account, and they can use a cartoon account to standardize identification and flat-rate charges.
The mechanism for third-party data source authentication is that the system interfaces with a cartoon database, and searches a cartoon data source for validation to determine user legitimacy. In this mode, account numbers are based on the school system, NATSHEL_AUTH_BILLING does not maintain duplicate accounts, students open their accounts, pay their fees, change their identity in the original school system, NATSHEL_AUTH_BILLING Automated Perceptions.
If the connection does not cover the sales scene, it will occur."People can use the account number."The interface programme will include a full process design for life cycle management (opening, deactivation, selling).
LDAP Integration with Educational Workers
The number of the accounts of the teaching staff group, usually tied to the school AD domain or personnel system. V7 supports LDAP certification, which is registered on the campus WiFi with a field account for teaching staff and is issued under organizational structure; it also supports integration with the personnel system, where teachers are automatically posted online and separations are automatically suspended.
The interface details are confirmed in advance: whether the interface is open, if the field can be mapted, how the synchronous frequency is determined, and how to handle failure."Just connect.", the field mapping and synchronization mechanism determines the consistency of account numbers, which are to be validated at the interface stage.
Reciprocal capacity and landline boundaries
V7 has the ability to adapt to a unified system of identity for schools, but location depends on several conditions: open interfaces for each other ' s systems, mapability of data fields, and access to reconciliation windows and privileges."All systems can be connected to the world without any conditions."。
The transition option is also considered when the interface is connected. If the school's old Authentication & Billing system is upgraded, the symmetry of the new and old system requires a diversion strategy, cut windows and rollback mechanisms; authentication attribute mapping, billing field consistency, failure regression paths must be validated. Upgrade can be phased in, with key to co-susplicative strategies, mapping rules and bond plans, not a key replacement.
Data backup is also a mandatory lesson in the context of the interface. Accounts, billing, log data are backed up regularly, and V7 supports data backup to prevent loss of data due to misoperation or system failure. Test data during the intercom are isolated from official data to avoid contamination.
Implementation steps for a unified identity docking
The implementation of the unified identity docking can be advanced in four steps: first, by taking stock and collating the existing system of accounts (teaching, a cartoon, AD domain, OA) to determine which is the main source of identity; second-step mapping to clearly identify fields (school/work), name fields, status fields; third-step routing to validate authentication processes, synchronization mechanisms, failure processing, confirmation of interfaces and privileges; fourth-step test operation, with a small scale gradually released.
The security of the account is another layer after a unified identity check. Once the school account number is tied to the school number, the work number is compromised, the leak will be significant. V7 supports double factor authentication (user password plus cell phone SMS) and dynamic code authentication, which can be activated on high-value areas or high-end access accounts; supports cryptographic strategy management, which can be configured for password complexity, change cycle, continuous error locking; supports account number automatic retirement."An account place."The account number is secure."This account is not used to get confused."Both should be considered together.
V7 supports self-service for users, and students can change passwords, search packages, online fees, and bind terminals. Once a single identity is connected, the self-service portal and the existing school service portal are as consistent as possible, with fewer web sites and less one process.
User groups and rights management follow the identity when they are connected to one identity. V7 supports multi-level user groups, which relate to different packages of food strategies, defining them as user IP, ACIP, ACNAME; supports the establishment of different managerial privileges by user groups, supporting agent system administration, and achieving more sophisticated competencies. As a result, students’ faculties and grades can be mapped into the user group, and managers can be configured according to the class or grade size strategy without having to operate on an account number basis. Teachers are organized in sector groups, visitors are single-sizeed, and their identities and entitlements correspond to each other.
The benefits of a unified identity match are long-term: students go through the campus with one account, managers maintain a set of data to the end, and financial statements are paid for all their income.