Group Definition Management via Authentication API Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current group definition management systems face challenges in efficiently synchronizing user information between internal company systems and external SNS services, leading to increased workload and potential errors in maintaining accurate user group definitions, especially during personnel changes.
Innovation Solution
A group definition management system that utilizes a first server and a second server connected via a network, with an authentication cooperation unit that inquires and registers user IDs between the internal and external servers using an authentication API, allowing for easy correspondence and reflection of group definitions across platforms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If user information is manually managed in external SNS service, then infrastructure construction load is reduced, but administrative workload increases significantly during personnel changes
Solution Approach 1:
The system enables automatic synchronization of user information between internal and external servers through self-service mechanisms. The external server autonomously receives update notifications from the internal server and performs group definition updates without requiring manual administrator intervention, thus reducing administrative workload while maintaining infrastructure simplicity.
Solution Approach 2:
The system establishes group definitions in advance on the external server based on internal server data before personnel changes occur. When personnel changes happen, the pre-configured update notification mechanism automatically triggers synchronization, eliminating the need for administrators to manually update group definitions after each personnel change.
2Manufacturing precision
If user information is synchronized between internal and external servers, then group definition accuracy is improved, but system complexity increases
Solution Approach 1:
The system uses an update notification mechanism as an intermediary between the internal and external servers. The internal server sends update notifications containing only the necessary user information changes, which the external server processes to maintain accurate group definitions. This intermediary approach simplifies the synchronization process compared to full data replication while ensuring accuracy.
Solution Approach 2:
The system extracts only the essential user information (user IDs and group memberships) from the internal server for synchronization purposes, rather than transferring complete user profiles. This extraction approach maintains group definition accuracy while reducing the complexity of data synchronization between servers.
3Ease of operation
If authentication API is used to inquire user information, then user ID correspondence is easily acquired, but communication load between servers increases
Solution Approach 1:
The system implements periodic authentication API calls only when update notifications are received, rather than continuously querying user information. The external server waits for update notifications from the internal server before initiating authentication API inquiries, thus acquiring user ID correspondence efficiently while minimizing unnecessary communication load between servers.
Data Source
AI summary
A group definition management system can easily acquire correspondence between an internal ID and an external ID and easily reflect information of a group definition for the internal ID to an external site. In a typical embodiment of the present invention, this is configured of an internal server 10, an external server 20, and a client. The internal server 10 has an internal user management table 15 and an internal authentication unit 11 that performs authentication by the internal ID. The external server 20 has an external user management table 24 and an external authentication unit 21 that performs authentication by the external ID and replies the information of the external ID in response to an inquiry for whether or not a specific user is an authentic user. The internal server 10 further has an authentication cooperation unit 13 that inquires the external server 20 about whether or not the user is the authentic user of the external server 20 in response to a request from the client used by the user authenticated by the internal authentication unit 11, and registers the replied external ID in the internal user management table 15 so as to correspond to the internal ID.