Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

In order to enable Push Provisioning, one or more Provisioning Plugins must be installed. By default, Registry ships with the following Plugins:

Plugin

Description

Notes

Changelog Provisioning Plugin

Exports transactions as JSON to a changelog file

Disabled by default

GitHub Provisioning PluginProvisions group (team) memberships to GitHub 

Grouper Provisioning Plugin

Provisions data to a MACE Grouper deployment

 

Homedir Provisioning Plugin

Provisions Unix home directories

Experimental

LDAP Provisioning Plugin

Provisions data to an LDAP server

 

You can also write a custom plugin.

...

  1. Login as a CO Administrator and select your CO.
  2. Go to Configuration > Provisioning Targets.
  3. Click (+) Add Provisioning Target.
  4. Configure the new Provisioning Target.
    1. If the Plugin you select has additional configuration options (most do), they will appear after you click Add.
    2. Plugins configured for Automatic Mode will be invoked automatically whenever COmanage Registry notices data suitable for provisioning has changed. Plugins configured for Manual Mode will only be invoked when a CO Admin explicitly does so (as described below).
    3. As of v1.0.3, Provisioning Targets can be ordered, so that a given provisioner can be guaranteed to run before another provisioner (for the same record). This applies only during Automatic Provisioning.
    4. As of

      v1

      v2.

      1

      0.0, a Provisioning Group can be specified. If provided, only CO People who are members of the CO Group (and only the CO Group itself, if the Provisioning Target also supports provisioning groups) will be provisioned using this provisioner. If a CO Person is subsequently removed from the group, their record will be deleted from the target (that is, the provisioning operation will automatically be converted to a delete action).

      Note

      Keep in mind that when a CO Person is not in Active or Grace Period status, they are effectively removed from all Groups (with the exception of All Members Groups) for purposes of provisioning. So, for example, if a CO Person is expired, and the Provisioning Target is configured for the I Like Ice Cream Group (of which the person is a member), they will be completely removed from the Provisioning Target. Only All Members groups (at either the CO or COU level) can be used to maintain an expired record in the Provisioning Target (assuming the Target supports such behavior in the first place).

  5. Configure any Plugin specific options.

...