Fc3 integration strategies
- 1. Gabriele Sani 16 December 2014 FC3 Integration strategies For a Best of Breed solution
- 2. Page 2 Now Key Issues • Multiple intranets and tools • Multiple logins • Very little content accessible across systems = many silos • Not a single identity across all systems • Lack of awareness of what is available, and where • No full onboarding or exit strategy • No permission integration across platforms Sumus LDAP Compass Oxfamily Box OKTA OGB AD Aff. Intr. CAM W&P P&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Karl W&P P&P P&P P&P P&P P&P Intranets Identity mngmt Digital Assets File Shar. Public Repositories Int. Com. SLO Key Content API Indexing
- 3. Page 3 Now - details • 20 independent orgs with separate systems and ADs • ~10000 employees (total) • In Sumus (the current global intranet) we have about 100000 documents • <100GB in total • Most files are MS Word, Excel, Powerpoint, or PDF, mostly under 10MB size (median at 2MB) • LDAP identities may not match AD ones, with email as the most likely common identifier between the two. Sumus LDAP Compass Oxfamily Box OKTA OGB AD Aff. Intr. CAM W&P P&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Karl W&P P&P P&P P&P P&P P&P Intranets Identity mngmt Digital Assets File Shar. Public Repositories Int. Com. SLO Key Content API Indexing
- 4. Page 4 Now - technology Sumus: Drupal 6 LDAP: OpenLDAP v3 Oxfamily: Drupal 7 Compass: Drupal 7 (150 users) Box: REST API (4000 users) • TBD is we will give it to everyone (expensive!) • we may eventually add or replace it with Office365 (for everyone) Words&Pictures: PHP OS system.(here FYI only: ignore it for now.) Sumus LDAP Compass Oxfamily Box OKTA OGB AD Aff. Intr. CAM W&P P&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Aff. Intr. W&P OGB AD Karl W&P P&P P&P P&P P&P P&P Intranets Identity mngmt Digital Assets File Shar. Public Repositories Int. Com. SLO Key Content API Indexing
- 6. Page 6 Two alternative strategies 1. Build APIs between each and every component 2. Use Enterprise Search to replace APIs when the only need is to retrieve content from other systems • Key common points: • One identity across all systems, and Single Sign On • One entry point for all content (Compass) • One powerful search • Shared UI
- 7. Page 7 • Being able to use digital assets without having to download them first would be useful, but it is not a priority End state (1) Intranets & KHs Internal comms File Sharing P&P ID MNGT OGB AD Digital Assets Affiliate ADs SearchPeople Directory SSO Key Content API Optional Content API Search Indexing P&P OGB AD P&P OGB AD P&P OGB AD P&P OGB AD Websites OGB AD FC3 Authenticated systems Public repositories: Policy&practice, Atlas, …
- 8. Page 8 • As ES1, but use search instead of multiple APIs to share content • API only to post content End state (2) Intranets & KHs Internal comms File Sharing P&P ID MNGT OGB AD Digital Assets Affiliate ADs SearchPeople Directory SSO Key Content API Optional Content API Search Indexing P&P OGB AD P&P OGB AD P&P OGB AD P&P OGB AD Websites OGB AD FC3 Authenticated systems Public repositories: Policy&practice, Atlas, …
- 9. Page 9 Notes • Since our platform of choice for both the intranets and internal communications is Drupal 7, we need just one API for both • The Search API already exists for several Enterprise Search tools • Drupal 7 can meet our requirements for the People Directory, hence it could be built within one of the existing systems • To have relevant results, the Enterprise Search needs to return results only from specific areas and facets
- 10. Page 10 • As ES2, but use an ECB at its core • enable also actions, eg: “edit file” • protect investment • Wide, growing set of systems • easily extendable End state (3) Intranets & KHs Internal comms File Sharing P&P ID MNGT OGB AD Digital Assets Affiliate ADs SearchPeople Directory SSO Key Content API Optional Content API Search Indexing P&P OGB AD P&P OGB AD P&P OGB AD P&P OGB AD Websites OGB AD FC3 Authenticated systems Public repositories: Policy&practice, Atlas, … ECB
- 11. Page 11 Notes • In a best of breed scenario, the use of a system that will sit between our applications and accept the same calls even between different systems means that we will have a completely pluggable architecture, where each individual piece can be replaced as needed. • http://www.mulesoft.org/ works with a Freemium model, and fits several requirements. Mulesoft • Has connectors for Drupal, Box, SharePoint, Shared Drives, S3 etc. • Can be used also for data migration • Can preprocess data (eg: apply/modify metadata) • Has connectors for several enterprise systems, like SAP, Oracle, ServiceNow, MS Dynamics, Salesforce, JIRA, etc. • Has connectors for social media like Facebook, Twitter, LinkedIn, etc. • Has connectors for SFTP, HTTP(S), SMTP, IMAP(S), CMIS, etc.
- 12. Page 12 • Adding new public repos is trivial • Adding, upgrading or replacing components is straightforward Future (?) Intranets & KHs Internal comms File Sharing P&P ID MNGT OGB AD Digital Assets Affiliate ADs SearchPeople Directory SSO Key Content API Optional Content API Search Indexing P&P OGB AD P&P OGB AD P&P OGB AD P&P OGB AD Websites OGB AD FC3 Authenticated systems Public repositories: Policy&practice, Atlas, … ECB IM WebConf Proj Mngt E-Learning
- 13. Page 13 • Adding new public repos is trivial • Changing components is straightforward • Our investment is protected • Avoid lock-ins and integration costs Future Intranets & KHs Internal comms File Sharing P&P ID MNGT OGB AD Digital Assets Affiliate ADs SearchPeople Directory SSO Key Content API Optional Content API Search Indexing P&P OGB AD P&P OGB AD P&P OGB AD P&P OGB AD Websites OGB AD FC3 Authenticated systems Public repositories: Policy&practice, Atlas, … IM WebConf Proj Mngt E-Learning
Editor's Notes
- #3: Definitions: AD – Active Directory (a service to manage identities of users and equipment) SSO – Single Sign On (One log in processes unlocks multiple systems) OGB AD – Oxfam Great Britain Active Directory OKTA – External service to integrate multiple ADs into one LDAP – The OpenSource core of an ActiveDirectory (it has the same core functionalities) W&P – Words and Pictures Databases for images and stories and some video content CAM – Creative Assets Management site for large brand design files Box – File Sharing provided by external provider Oxfamily – Confederation internal news site P&P – Policy and Practice site
- #4: Definitions: AD – Active Directory (a service to manage identities of users and equipment) SSO – Single Sign On (One log in processes unlocks multiple systems) OGB AD – Oxfam Great Britain Active Directory OKTA – External service to integrate multiple ADs into one LDAP – The OpenSource core of an ActiveDirectory (it has the same core functionalities) W&P – Words and Pictures Databases for images and stories and some video content CAM – Creative Assets Management site for large brand design files Box – File Sharing provided by external provider Oxfamily – Confederation internal news site P&P – Policy and Practice site
- #5: Definitions: AD – Active Directory (a service to manage identities of users and equipment) SSO – Single Sign On (One log in processes unlocks multiple systems) OGB AD – Oxfam Great Britain Active Directory OKTA – External service to integrate multiple ADs into one LDAP – The OpenSource core of an ActiveDirectory (it has the same core functionalities) W&P – Words and Pictures Databases for images and stories and some video content CAM – Creative Assets Management site for large brand design files Box – File Sharing provided by external provider Oxfamily – Confederation internal news site P&P – Policy and Practice site
- #11: Drupal c
- #13: Drupal c