> On May 7, 2015, at 3:06 PM, Oleksandr Bodriagov (Polystar) > <[email protected]> wrote: > > Apache fortress projectąs main page has the following image: > https://directory.apache.org/images/Fortress-IAMServer-v2.png > > It refers to the server with "Customerąs Active Directory Users, Groups" > and mentions translucency (if I am not mistaken, the picture has a low > resolution) in this context. What does it mean? Is it somehow possible to > map users+groups from AD to Fortressą roles on the fly? > > What are customerąs fine-grained entitlements?
That is a ‘vision’ slide which means it was our original target when we started the project back in 2009. https://directory.apache.org/fortress/vision.html Many of those features have been added (sentry (a.k.a. realm), commander (fortress-web), enmasse (fortress-rest)), others have not (STS, perimeter, AD and fine-grained entitlements in DB). Customer fine-grained entitlements refers to a concept of using a virtual directory to map to resources that reside inside relational database tables. Theoretically possible of course. We have not gotten around to it yet. Out of the items yet to be implemented, I can predict the perimeter component (SSO/web access management) is our next target. It is somewhat misleading to have this image on the fortress home page. Perhaps should be removed to eliminate confusion. Shawn [email protected]
