...
4. (recipe for "best practice") Whenshould ser When should user objects be created witin within Confluence? What is the "best practice"? What tools/interfaces are available?
Operating in a Hybrid environment. A growing number of campuses worldwide are reporting that they need to allow both local and remote users access to controlled spaces. They need to allow both local and Federated users to login to Confluence, and gain access to resources. This implies the need for some mechanism to persist privileges associated with remote users; perhaps the easiest approach is to dynamically create user objects within Confluence that are associated with the remote users, and associate privilege information with that user object.
5. A course based at Brown includes students registered at Brown, as well as 14 students registered at a university in France. The Brown-based instructor is able to compose an ldap-based group that includes the local students as well as the 14 french students (who access the brown-based services using their Federated credentials). The instructor is then able to grant this group write access to a space within Confluence. The local students use their brown credentials to access this space; the french students use their "local" credentials (at the French university), and the Shibboleth software, to access this space.
...