How Can I Integrate Sign in Grooper

How To Integrate Sign in Grooper

I'm Chris wiser from internet too and University of Pennsylvania and this is grouper training the developers and architects track training video on integration so I want an introduction about what we mean by integration and then some of the decisions that you're going to have to make when integrating your apps with grouper groups bursts permissions ldap web services sam'l assertions cash drawers live calls grouper API reverse local representation another feature so in the image of grouper components the integration includes the application that you're integrating with either the grouper client or soap arrest or LDAP sam'l XMPP notifications etc so for groups verse permissions your application is going to have to decide if the authorization is going to be grouped based or permission based if using groups then that's a coarse-grained authorization and the permissions that the groups or roles are based on are going to be mapped or hard coded so you're going to have something that says this permission if you're in this group or this role and then you have this permission if your application is permissions based permissions in grouper then you have a little bit more flexibility because you don't have something that's hard coded you can audit who has what permission centrally as opposed to trying to figure out what that means in the application etc so if you're using groups then grouper will store who is a student faculty or admin and this can be loaded from a source of record and the application will get that information of either who's in which group or if someone's in a group as the using applique and then one of the screens of the application or logic inside the application somewhere would say something like if the user is has the group student then show the courses menu or if there are faculty then show the reports menu or if they're an admin show the audit menu etc if you're using permissions for authorization then you define all the permission resources in grouper such as the courses many reports menu not a menu and you have some actions on those resources in this case show or just a sign and those permissions will go to your application and then your screen well instead of seeing if you're in a group show something it'll see if you have a certain permission to show it and then it will show it so just a note that if you're using permissions doesn't necessarily mean that each permission is assigned to each individual user you'll typically have the role based approach where your assignments are made for the group or role and the grouper role might be loaded from a system of record so in this case the application might have the roles that we've been talking about student faculty and admin and these roles might have groups inside of them are assigned to them that are loaded from the source systems and the roles also...