Add OS Auth solution to prototype

[stvnrlly]

Answer the following questions:

- What is our goal / what are we trying to accomplish in the next 2 weeks?

Determine viability of using OpenIAM as an authentication mechanism and user store to create an encapsulation lever.

- How will we measure if this is successful (Acceptance Criteria)?

• 👍 or 👎 on using OpenIAM
• Ability to add users to our new DB
• Ability to access users from MyBenefits or VHC DBs

- What are the Concrete Next Steps?

• [x] Research OpenIAM (Need to purchase to access services)
• [x] Research OpenIAM alternatives
  • [x] OpenAM (The latest open source release v11.x is being deprecated and purchase is needed to access updated services)
  • [x] Shibboleth
  • [x] WS02
  • [x] LemonLDAP NG
• [x] Update prototype
• [x] Find where VHC DB dumps are kept (Moving to prototyping api connecting VHC/MyBenefits)
• [x] Research how to use DB dump (Moving to prototyping api connecting VHC/MyBenefits)
• [x] Create fake data (generator?) based on DB dump for testing (Moving to prototyping api connecting VHC/MyBenefits)

[apburnes]

You need to contact an OpenIAM representative to get access and it doesn't look like they have an open source option.

Will continue to do discovery into OpenAM Community Edition, LemonLDAP NG, and Shibboleth

[apburnes]

Research Update

👎 OpenIAM

[apburnes]

Updated open source IAM research ToDo

• [x] OpenAM
• [x] Shibboleth
• [x] WS02
• [x] LemonLDAP NG

[stvnrlly]

Moved that list of alternatives into the top comment for easier tracking.

[arouault]

Update:

• new users from GMC / other options, there needs to be a user creation method

[apburnes]

Continuing work on prototype https://github.com/VermontAHS/Authorization