Identity integration is a major challenge facing many large enterprises today. STLCC's Technology and Educational Support Services Division (TESS) integrated SunGard Banner 8.3 as the authoritative Enterprise Resource Planning system with the College's Active Directory 2003 (AD) authentication system. Over the past two years, TESS architected an integrated solution that promoted consistent provisioning and de-provisioning policies and unified account management processes. This resulted in a completely automated single common credential for all of the college's constituents.

Two middleware applications, SunGard Banner Enterprise Identity Services (BEIS) 8.1 and Microsoft Identity Lifecycle Manager 2007 (ILM), and a customized LDAP web service, were used to interconnect the two core infrastructure systems. A Services Oriented Architecture (SOA) was setup to handshake with the central system and the Microsoft Light Directory Service (LDS) via Web Services Description Language (WSDL) and Simple Object Access Protocol (SOAP). This customized LDAP connector web service was written to communicate to the LDS instance to populate identity information in real time using Oracle stream technology. Oracle stream monitors changes in the Banner database and triggers identity. Upon LDS update, ILM provisions users' accounts and updates global security groups to grant them appropriate and secure access based on their roles.

Achieved