Skip to content
Browse files
Update thoughts.adoc
  • Loading branch information
khazelton committed May 12, 2021
1 parent 2b1a413 commit 1b23effb1c3e0eb0c00c455f4d4523e39da423c2
Showing with 2 additions and 22 deletions.
  1. +2 −22 thoughts.adoc
@@ -8,27 +8,7 @@ Each SoR record fires an event when it detects a person previously unknown to th

MVService: create subscriber to 'noticedNewPerson'; Its only function is to generate a new internal identifier, link it to the Sorid-assigned unique identifier and persist that info.

- - -

*Hypothetical Precondition*

A person was just now added to a System of Record,
midPoint has not yet processed this, so has no record of their existence
If ID Match is implemented and detects the need to merge two existing identities, send a 'mergeableIdentitiesFound' that the person registry will pick up and process appropriately.

Process A: A Grouper admin wants to manage groups for the new person
. Grouper admin types something they know about the person (a name or email or other identifier) into Grouper
.. Case 1: Subject lookup--not found. What happens then?
.. Case 2: Person is found in subject source. What identifier is used when adding them as a member to a group?
... What manages getting subjects into the subject source
... How does midPoint associate this group member with a know user?

"Solutions and tradeoffs"

. Have Grouper subject source be provisioned by midPoint;
.. Consequences: Grouper subject search will fail until new person appears in subject source
- - -

. Have ID Match always return an identifier for the queried person
.. works for cases where ID Match can definitively match a known identity or definitively be recognized as new, and return the identifier in either case
.. If the result is multiple candidate matches that require human resolution, Id Match does not immediately return an identifier
.. Fix: Have ID Match assign a new identifier to the person in question and return immediately while starting the identity resolution workflow
... Consequence: If a match with an existing user is eventually found, an identifier correction needs to take place

0 comments on commit 1b23eff

Please sign in to comment.