Methods and systems for managing directory information
AssigneeCitigroup Technology, Inc.
InventorsSandeep Nair, Jerry Speyer, Udaya Chandupatla
Life of this patent
Estimating the term…
Abstract
Methods and systems for managing directory information, such as onboarding a LDAP server, employing a processor coupled to memory and other computer hardware and software components for receiving a request related to one or more applications from a requestor in pre-determined business logic, acknowledging the request by an approver function without requiring the requestor to negotiate, for example, with an LDAP administrator to justify the request, and provisioning the request into the enterprise LDAP server in the pre-determined business logic.
Claims14
A method of onboarding an enterprise Lightweight Director Access Protocol (LDAP) server, comprising:
- creating, by a processor coupled to memory, without involvement of an administrator, a functional identifier (ID) with the enterprise LDAP server responsive to a request and a reason for the request for the functional identifier (ID) from a non-administrator end user who is an application owner of at least one enterprise application responsible for objectives of the at least one enterprise application, wherein the request and a reason for the request for the functional identifier (ID) is received in pre-determined business logic;
- creating, by the processor, without involvement of the administrator, the application owner's own application role custom attribute for authorization allowing the application owner functional identifier (ID) access for at least modification or query of the at least one enterprise application on the application owner's own custom attribute responsive to a request and a reason for the request for the application role custom attribute from the non-administrator end user, wherein the request and a reason for the request for the application role custom attribute is received in pre-determined business logic;
- generating, using the processor, a notification and acknowledgement of the respective requests by an approver function without involvement of the administrator;
- and
- provisioning, using the processor, the application owner's application role custom attribute for authorization allowing the application owner functional identifier (ID) access for at least modification or query of the at least one enterprise application on the application owner's own custom attribute into the enterprise LDAP server based solely on the reason for the request and without involvement of the administrator.
A system for onboarding enterprise Lightweight Directory Access Protocol (LDAP) server, comprising:
- a processor coupled to memory, wherein the processor is programmed to:
- create without involvement of an administrator, a functional identifier (ID) with the enterprise LDAP server responsive to a. request and a reason for the request for the functional identifier (ID) from a non-administrator end user who is an application owner of at least one enterprise application responsible for objectives of the at least one enterprise application, wherein the request and a reason for the request for the functional identifier (II) is received in pre-determined business logic;
- create, without involvement of the administrator, the application owner's own application role custom attribute for authorization allowing the application owner functional identifier (ID) access for at least modification or query of the at least one enterprise application on the application owner's own custom attribute responsive to a request and a reason for the request for the application role custom attribute from the non-administrator end user, wherein the request and a reason for the request for the application role custom attribute is received in pre-determined business logic;
- generate, a notification and acknowledgement of the respective requests by an approver function without involvement of the administrator;
- and
- provision the application owner's application role custom attribute for authorization allowing the application owner functional identifier (ID) access for at least modification or query of the at least one enterprise application on the application owner's own custom attribute into the enterprise LDAP server, based solely on the reason for the request and without involvement of the administrator.
Dependencies are inferred from the claim text.