diff --git a/README.md b/README.md index 93e0df5..031c603 100644 --- a/README.md +++ b/README.md @@ -19,8 +19,8 @@ What is COmanage, why does it exist, and how is it used? This online course desc Time | Section | Description ---- | ------- | -----------   | [Setup](/episodes/setup.md) | Prepare for the lesson -00:00 | 1. First episode | description -00:10 | 2. Second episode | description +00:00 | 1. [Identity Registries](/episodes/identityRegistries.md) | COmanage is an Identity Registry. Why do these exist? +00:10 | 2. [Registry Architecture](/episodes/architecture.md) | The registry position in an Identity and Access Management (IAM) architecture _The actual schedule may vary slightly depending on the topics and exercises chosen by the instructor._ diff --git a/episodes/architecture.md b/episodes/architecture.md new file mode 100644 index 0000000..6ed82c6 --- /dev/null +++ b/episodes/architecture.md @@ -0,0 +1,17 @@ +--- +title: "Registry Architecture" +teaching: 5 +exercises: 0 +questions: +- "Question here" +objectives: +- "List the objectives" +keypoints: +- "List the key takeaways for the episode" +--- + +Where does the Registry sit in an Identity and Access Management (IAM) architecture? + +## Person Information/ Data Flow + +![Flow Diagram](../fig/infoFlow.png) diff --git a/episodes/identityRegistries.md b/episodes/identityRegistries.md new file mode 100644 index 0000000..dc3ea85 --- /dev/null +++ b/episodes/identityRegistries.md @@ -0,0 +1,24 @@ +--- +title: "Identity Registries" +teaching: 5 +exercises: 0 +questions: +- "Question here" +objectives: +- "List the objectives" +keypoints: +- "List the key takeaways for the episode" +--- + +COmanage is an Identity Registry. What is a registry? + +## What is an identity registry? + +An **Identity Registry** is a database for storing, curating, and managing electronic identities for people. The primary purpose for creating a registry is to manage your users' access to electronic services. + +A key benefit to storing this information in a registry rather than a file, spreadsheet or general purpose database is because registries provide pre-configured features to enable sharing of information about the registered people with “downstream” services. Registries can help manage who will gain access to these services, either directly or through a secondary system that works with the registry. + +## A bit of history + +Despite the usefulness of registries, there is no universal incumbent product that is used. For many years, each university wrote its own identity registry to satisfy its own local use cases; many universities still take this approach. More recently, some universities have been working together to create a "Registry for Higher Education and Research" (with mixed success.) There also are newer enterprise and open source efforts have been aimed at organizations of different sizes. + diff --git a/fig/infoFlow.png b/fig/infoFlow.png new file mode 100644 index 0000000..7c21edd Binary files /dev/null and b/fig/infoFlow.png differ