Two GCF CPIP's, One Set of User Credentials
I have two systems that use the same user credentials (not the same as the Luminis credentials). I'd like to build GCF CPIP's to both of them, but don't want to store the same credentials twice. If I store them twice, when a user changes their password on the external system, they will need to update two places in Luminis.
Is there any way to get two CPIP's to access one set of credentials?
Thanks.
Making a generic gcf =)
Might want to take a look at this - http://www.lumdev.net/node/606
Havel
Ideas
I believe the limitations of the GCF adapter is that it will only pull the configuration information for one external system.
The easiest solution (from the Luminis perspective) is to use External Authentication, and pass the same credentials through Luminis via the usePdsLogin option in the GCF connector's XML file. This would allow for a central authentication source, that when update, would apply to multiple systems.
Inside of the LDAP node uid=xx,ou=People,o=xxx,o-cp you have a pipe separated attribute "pdsPssEntry" listing each external system, along with the username, and password (encrypted). Now, since you already know the encrypted value for the system the user updates, you could create a hook (like an script in cron) to propagate this encrypted value to the other external system entry. This would effectively sync the credentials between the two system with the same values.
The other possibility is that creating a CPIP connector (which I would NOT recommend because of the shear complexity) might allow you to manually choose which pdsPssEntry credentials to fetch. For example, you could write a CPIP connector for system A, by pulling the credentials for system B. I don't know if this is possible however, but I am sure the answer lies in the CPIP documentation.
File a feature request with Sungard for this feature in Luminis.
So there is four possibilities; each of them quite nasty solutions to a relatively simple problem.