Scope
Constellation is an automated Active Directory (AD) account provisioning system that uses the NIH Enterprise Directory (NED) as its data source. It automatically creates and deletes AD accounts based on NED actions and synchronizes personal data from NED to AD. The data sync is performed for all ICs, while the automated account provisioning is voluntary. There are currently nine ICs, accounting for about 50% of the people at NIH, provisioned.
Expected Value
The data synchronization functionality of Constellation establishes NED as the single repository of person data at NIH. When personal information (like location or phone number) changes, only NED needs to be changed, the AD directory will be automatically modified to reflect the new data. The account provisioning functionality establishes the IC Administrative Officer (AO) as the authoritative source for authorization of AD accounts. Once the AO authorizes the AD account through a NED application, the account is automatically created with all the correct attributes. This eliminates the possibility of errors that can occur when account requests must be passed from person to person. AD accounts are automatically disabled when a person's NED entry is inactivated by an AO or via an automated process. Since both NED and Constellation log all actions, an audit log is automatically available if questions or problems arise.
2007 4th Quarter
- Modify Constellation to support the modified AD lifecycle policy
- Provision NIEHS
2008 1st Quarter
- Work with OD to get prepared for Constellation provisioning
- Discuss Constellation provisioning with interested ICs and provision new ICs who request it
2008 2nd Quarter
- Discuss Constellation provisioning with interested ICs and provision new ICs who request it
2008 3rd Quarter
- Discuss Constellation provisioning with interested ICs and provision new ICs who request it
This plan is subject to change as business conditions change. Please check back often. Contact us if you have questions or concerns about the Program Plan.
Last Updated:
June 23, 2008
