Nobody is mentioning a big open source project like Grouper, https://incommon.org/trusted-access/
Can someone tell me why is this project, or 4 softwares, not more widely known?
Can someone tell me why is this project, or 4 softwares, not more widely known?
Likely, busy people don’t spend a lot of time digging in to software that doesn’t effectively communicate clearly what it is, unless they know from a trusted colleague, friend, or other resource that the software/tool will be essential or a major win for them.
That’s a long-winded way to say “marketing” :)
Said that, I fully understand why people would not invest enough time to understand the Grouper environment, I going through it and feels like a punishment.
If someone wants to see the potential, check this list of known users and their use cases : https://spaces.at.internet2.edu/display/Grouper/Community+Co...
When I tried to import my institution LDAP, I had to exclude the major groups it was meant to manage as they were basically undeletable. Sure you could easily delete one reference group ex (u:ref:students:adm:adm101:20201:01) but deleting all the group from a faculty (evrything under u:ref:students:adm) took more than a weekend (I killed the job and recreated the database from a snapshot).
In the grouper mailing list it was suggested to keep only the previous, current and next trimester but this arrangement was unworkable at my institution, there are valid usecases that require groups from the 5 last years.
Things might have changed since I did this experiment a few years ago and I dont do identity management anymore :)
In my institution I have to replace a long lived solution that even suports a nis domain, and I feel a bit overwhelmed.
I've definitely heard of Shibboleth, it's one of the big players in OSS SAML implementations.