Home › Blogs › mchildress's blog

SAF: Is it required if using ILM and Active Directory

Thu, 2008-09-25 19:44 — mchildress
0
No votes yet

We are in the beginning stages of a Luminis IV implementation and are working with Sungard on the proposal. They added in 50 hrs for SAF (Secure Authentication Framework). I have a question though, do we really need it? We plan on using Active Directory as our external authentication source and plan on letting users change their password, retrieve their password, as well as authenticate. We also want to be able to make those changes in Luminis and push it up to AD and Banner and vice-versa.

Have any of you done it without SAF? If so, what were your results?

Thanks to all,

Mike

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Fri, 2008-09-26 09:34 — jdan

Why Luminis?

Do you already have Luminis 3 implemented? if not, why go for Luminis IV then? there are major issues with integration. we implemented open source portal and its awesome. look for either uportal or i would suggest liferay.

-JD

Fri, 2008-09-26 11:01 — mchildress

RE: Why Luminis?

Thanks for the comment jdan. The university is already committed to Luminis. Currently we are at version 3.3.3.142 but we will be reimplementing with IV soon. Currently we don't run much with our install (just calendar, group studio, and a few channels).

What are the major issues that you mentioned in your post? Thanks again. Mike

Mon, 2008-09-29 10:11 — jchannel

Sort of but need more information...

We use our AD for authentication without SAF. We have set up authentication by role in Luminis with the one role defined being internal Luminis accts (cpadmin, layout accts,etc.). These accounts use Luminis LDAP and everything else uses AD. How do you plan to allow your users to change and retrieve passwords?

Whether you need this really depends on whether you have a good method to allow users to change and retrieve their own passwords. If you would like to discuss further let me know.

Thanks,
James

Mon, 2008-09-29 10:14 — jchannel

Re: Sort of but need more information...

I did miss your push from Luminis to AD comment...

If you want to push from Luminis to AD you probably need SAF. We do not do this. Our password change and retrieve is set up in AD and pushed to Luminis...

James

Wed, 2008-10-01 19:38 — katya

Need SAF to push passwords from Luminis to A.D.

Hi Mike -

Yes, if you want to be able to push password changes from Luminis' password support back to a user's A.D. account, you do need the custom SAF component. Out of the box, Luminis IV EAS won't push passwords to outside systems.

But if you can allow users to update their A.D. passwords directly into A.D., then you could do out of the box EAS against A.D. for Luminis. A.D. will then update Luminis with its password the next time a users logs into Luminis.

   Alice Kim

Thu, 2008-10-02 19:36 — mchildress

Thanks Alice!

Thanks very much Alice. That is exactly what I needed to know. - Mike