Account Service Description and Assumptions

Description

Account service offers operations to manage a CollectionSpace account. To securely access the CollectionSpace services, an account for a user is required in the system. An account is associated with an identity. The identity could either reside in [collectionspace:CollectionSpace Identity Provider (CSIP)] which is the default identity provider or a foreign identity provider such as CalNet or an OpenID provider.

Key Concepts

Relationships

Following describes the relationship between an Account, a Person and a User in the [default identity provider].

An account is associated with at least one Person in CollectionSpace. An account is always associated with one user identity. This identity could reside in the default identity provider or a foreign identity provider. An account might optionally manage an identity if the identity is stored in the realm managed by the default identity provider.

Assumptions

1. In a multi-tenant SaaS deployment of CollectionSpace, it is assumed that account service is consumed by users with privileges to manage accounts for a tenant.
2. Tenant context (id) is never available to the account service consumer nor is required to be provided by the consumer.

Assumptions for managing account with identity managed by [CollectionSpace Identity Provider]

Issues

References

1. [collectionspace:Authentication Service Description and Assumptions]
2. [collectionspace:CollectionSpace Identity Provider (CSIP)]
3. [Design notes for multi-tenancy in CollectionSpace]

Questions