#Enter the persons who are participating in the team that works on this Activity - delete this line after using the template#

#Please describe the goals of Activity, including what needs to be delivered, participants, the community(ies) that require a solution. Describe when the Activity is done and how to measure the success of it, in a SMART way. - delete this line after using the template#

<Enter here>

The goal of this activity is to create a production ready prototype based on the existing proof of concept, integrate it with eduTEAMS and provide it as an open source tool to the community.

Identity and access management components used in GÉANT eduTEAMS are not an exception. Thus they rely on custom connectors to deliver authorization data to managed services, usually utilizing standardized protocols like SSH or LDAP. Although this solution is not technically ideal, it works for most services operated on Unix-based operating systems. For services operated on Windows OS, there might be a problem to transfer the required data to the machines unless the service itself has an API for that, which is not always the case.
To overcome this obstacle, CESNET and Masaryk University piloted a simple connector for provisioning data to services hosted on Windows OS. The connector uses SSH as a data transfer protocol, which is currently supported by the latest Windows OS. SSH runs Powershell script on a destination which is customized for managed service, and its responsibility is to configure the service with provisioned identity and access control information.

This topic is related to Instant User Provisioning and Deprovisioning. Where possible, technical synergies shall be identified to the benefit of both solutions.

#Please describe the technical details for the Activity. - delete this line after using the template#

<Enter here>

#What is the business case for the Activity? Who would be beneficiaries of the results of the Activity and what would potential business case look like if applicable? - delete this line after using the template#

<Enter here>This product eases the way of integration IAM into Windows based systems. It enables identity management systems to interact directly with services hosted on Windows and allows administrators to easily mange these systems. This can not only be used directly by institution with existing IDM in place, but also by GÉANT services like eduTEAMS.

#Are there risks that influence either the implementation of the activity or its outcomes? - delete this line after using the template#

<Enter here>

• First time a project was proposed and will be implemented by TIM → unknown outcome

• The product handles identity, authentication and authorization
• No or only a few real user data are processed by the prototype developed by the Incubator

#How do data protection and privacy impact the Activity? Think about e.g. handling of personal data of users - delete this line after using the template#

Requirement	State
A working prototype is implemented based on the POC
The concept and implementation is documented
The prototype is tested with the eduTEAMS platform
The source code it provided to the open source community

#Please describe here the set of criteria that the product must meet in order to be considered finished. - delete this line after using the template#

The aim of this project is to create an easy to use, adoptable software solution to provision server users and provide this tool to the community.

As part of a case study the solution will be implemented for a Czech University (Faculty of informatics MU) which will continue to use the solution afterwards.

CESNET will continue to use and maintain the software for the foreseeable future.

Besides this, the solution shall be adjusted to the needs of eduTEAMS. The solution will be provided to the eduTEAMS service task to be integrated into the GÉANT service.

#How are the results of the Activity intended to be used? If this requires further engagement, can you describe how you intent to sustain it? - delete this line after using the template#

<Enter here>

The following results were created and delivered:

• Windows Connector Installation Guide
• Publicly available source code including test automation and a windows installation package
• eduTEAMS integrated test environment
• Windows Connecter Case Study