!!! Overview [System for Cross-domain Identity Management] [Use cases] is part of [SCIM 2.0] and defined in [RFC 7642] !! Terminology * [COI] - Community of Interest * [CRM] - Customer Relationship Management * [CRUD] - Create, Read, Update, Delete * [CSP]- Cloud Service Provider * [CSU] - Cloud Service User * [ECS] - Enterprise Cloud Subscriber * [IaaS] - Infrastructure as a Service * [JIT] - Just In Time * [PaaS] - Platform as a Service * [SaaS] - Software as a Service * [SAML] - Security Assertion Markup Language * [SCIM] - System for Cross-domain Identity Management * [SSO] - Single Sign-On !! [SCIM] Model Concepts ! Triggers Quite simply, triggers are actions or activities that start [SCIM] flows. Triggers may not be relevant at the protocol level or the schema level; they really serve to help identify the type or activity that resulted in a [SCIM] protocol exchange. Triggers make use of the traditional provisioning [CRUD] (Create, Read, Update, Delete) operations but add additional use-case contexts like [SSO] ([Single Sign-On]) as it is designed to capture a class of use case that makes sense to the actor requesting it rather than to describe a protocol operation. !! Actors {{{ +---------------------+ | Cloud Service | | Provider (CSP) | +---------------------+ | +--------------------------------+ | | v v +----------------+ +----------------+ |Enterprise Cloud| |Enterprise Cloud| |Subscriber (ECS)| |Subscriber (ECS)| +----------------+ +----------------+ | | +----------------+ +----------------+ | | | | v v v v +-------------+ +-------------+ +-------------+ +-------------+ |Cloud Service| |Cloud Service| |Cloud Service| |Cloud Service| | User (CSU) | | User (CSU) | | User (CSU) | | User (CSU) | +-------------+ +-------------+ +-------------+ +-------------+ }}} !! Flows from [Cloud Service Provider] to [Cloud Service Provider] ([CSP]->[CSP]) These scenarios represent flows between two Cloud Service Providers (CSPs). It is assumed that each CSP maintains an [Identity Data Store] for its Cloud Service Users (CSUs). These scenarios address various joiner, mover, leaver, and JIT triggers, resulting in push and pull data exchanges between the CSPs. !! Flows from [Cloud Service Provider] to [Cloud Service Provider] ([CSP]->[CSP]) These scenarios represent flows between two [Cloud Service Providers] ([CSPs]). It is assumed that each [CSP] maintains an [Identity Data Store] for its [Cloud Service Users] ([CSUs]). These scenarios address various [joiner], [mover], [leaver], and [JIT] triggers, resulting in push and pull data exchanges between the [CSPs]. !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]