Schema change governance for identity store

• US 20060155716A1
• Filed: 12/23/2004
• Published: 07/13/2006
• Est. Priority Date: 12/23/2004
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Leibmann, Matthias, Brown, Laurie A., Lawrence, Mark David, Hunter, Kimberley Ann, Vasishth, Karan
• Application Number:
  US11/021,745
• Publication Number:
  US 20060155716A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling

Abstract

A system includes a schema defining terms for objects in an identity store, and a schema governance module controlling changes to the schema based on schema change criteria. A method of managing an existing schema defining objects in an identity store includes receiving a request specifying a proposed change to the existing schema, and determining whether to approve the proposed schema change based on schema change criteria.

Claims

1. A method of managing an existing schema defining objects in an identity store comprising:

receiving a request specifying a proposed change to the existing schema; and

determining whether to approve the proposed schema change based on schema change criteria.

2. A method as recited in claim 1 wherein the proposed schema change comprises an extension to the existing schema.

3. A method as recited in claim 1 wherein the proposed schema change comprises a deletion of an attribute in the existing schema.

4. A method as in claim 1 wherein determining comprises determining whether the proposed schema change constitutes a duplication of a class in the existing schema.

5. A method as recited in claim 1 further comprising determining whether the proposed schema change constitutes a duplication of a class related to another proposed schema change.

6. A method as recited in claim 1 wherein determining comprises determining whether the proposed schema change conflicts with a class in the existing schema.

7. A method as recited in claim 1 wherein determining comprises determining whether the proposed schema change conflicts with another proposed schema change.

8. A method as recited in claim 1 further comprising providing a schema change request form via a forms server.

9. A method as recited in claim 1 further comprising deploying the proposed schema change if the proposed schema change is approved, wherein deploying comprises:

updating the schema with the proposed schema change;

deploying the updated schema on a pilot basis for a specified period of time;

deploying the updated schema on a production basis after the specified period of time, if no technical problems are detected during the specified period of time.

10. A system comprising:

a schema defining terms for objects in an identity store;

a schema governance module controlling changes to the schema based on schema change criteria.

11. A system as recited in claim 10 further comprising a forms server providing a schema change request form, whereby a user can request a change to the schema.

12. A system as recited in claim 10 wherein the schema change criteria specifies rules dictating whether a proposed schema change should be approved.

13. A system as recited in claim 10 wherein the schema change criteria specifies rules comprising at least one of the following:

a proposed new class shall not duplicate an existing class;

a proposed new class shall not conflict with an existing class;

a proposed new class shall not violate security policies;

a proposed new class shall not violate corporate policies.

14. A system as recited in claim 10 wherein the schema governance module updates the schema based on an approved proposed schema change and deploys the updated schema in an ACTIVE DIRECTORY.

15. A system as recited in claim 10 wherein the schema is stored in a domain and accessible by a domain controller.

16. A system as recited in claim 10 wherein the identity store comprises metadata descriptive of real-world entities.

17. A system for managing changes to a schema defining vocabulary for metadata in an identity store, the system comprising:

a server governance module having schema change criteria specifying rules for determining whether to approve or reject a proposed schema change;

means for generating a schema change request form with which a user can describe a change to a definition related to the metadata.

18. A system as recited in claim 17 wherein the means for generating comprises a hypertext markup language server (HTML).

19. A system as recited in claim 17 wherein the schema change request form is an online form submitted via network by the user.

20. A system as recited in claim 17 wherein the server governance module first deploys an approved proposed schema change in a testing stage and then deploys the approved proposed schema change in production stage, if no technical problems are detected in the testing stage.