CMU is working with a SAAS vendor to outsource its student account's accounts receivable functionality but integrate that functionality into its existing Student Information System. Integrating services from many vendors is our core strategy for constructing a new Student Information System. The AR service come with an existing authorization model that has to be integrated into the overall SIS - that model being roles and business rules. CMU is permitted to assert roles as part of a SAML assertion but the fine grained business rules are handled by a UI that exists as part of the service.These rules determine what various roles can do against resources. There are several problems to be solved.
...