Suggestion for Configuring Grouper WS Rest User

The COmanage Registry Grouper Provisioner provisions groups and membership from Registry to Grouper by invoking Grouper web services (WS) calls, specifically the Grouper REST WS functionality. It does this by authenticating to Grouper WS using basic authentication (a login and password combination). The authenticated user as known by Grouper WS must have the necessary privileges to create folders (stems), groups, and memberships in the stem used for the CO (since provisioner instances are configured per-CO).

There are many different ways one might configure a Grouper WS deployment to support basic authentication for a user with the required privileges. Here we outline a simple approach often used.