Strange Brew: The Blog of Warren Strange

Google Apps provides a nice provisioning API to manage Google Apps accounts.


Using this API I have written a custom resource adapter for Sun for Sun Java System Identity Manager. Here is a screen shot showing the configured adapter:







This adapter enables you to manage the full life cycle of Google Apps accounts through Identity Manager. This includes the standard CRUD operations (Create, Read, Update, Delete) as well as enable/disable account, change/reset password and support for reconciliation.

Here is a screen shot showing the results of running a full reconciliation:





Along with the adapter, there is a user form provided that is compatible with the IdM dynamic tabbed user form framework:





As you can see from the above form, you can manage the Google Apps nicknames (mail aliases) for the user.


If you are interested in testing out this adapter, please drop me a note ( my email is warren dot strange at sun.com). My plan is to open source the adapter code - but this will be done in conjunction with a future IdM release. There is some exciting news coming on that front - can't say more right now, so stay tuned!

A few folks asked for an electronic copy of my presentation (Identity Management Lessons learned) given at the reboot Security and Privacy conference.
You can download the OpenOffice format from here

A nice introduction to i-Names can be found here http://www.xdi.org/i-names-explained.html


In a nutshell, an i-Name adds a level of indirection to an address. This is certainly an idea whose time has come. I have often wondered why the postal service has never adopted such a scheme?

powered by performancing firefox