# Presentation: 922440

## NIH Directory Service Update

- NIH AMG Technical Subcommittee

- 1999-06-30

## Outline

- Background
- Directory Product and Technology Status
- “Fast Track” Overview
- Data Cleaning
- Directory Steering Committee
- “Fast Track” Update Service Demo
- Questions and Discussion

- 1999-06-30

## Background

- AMG Technical Subcommittee formed in August ‘97 to implement NIH Directory Service and Public Key Infrastructure (PKI)
- Main Goals of NIH Directory Service:
- Reliably identify and store information on people who use NIH resources
- Be usable by both people and machines
- Support PKI

- 1999-06-30

## Technology and Product Status

- Active Directory Investigation
- Met with Microsoft
- Looking into CA, Key Management, etc.
- AD as LDAP Server for NIH Directory
- PKI - Microsoft Exchange
- Provide Secure Email
- 4 Scenarios in V1
- Outlook, Exchange Server, NIH, Non-NIH
- Certs copied into Directory

- 1999-06-30

## Tech. (Cont.)

- BCA - FedPKI Bridge Certificate Authority
- Border Directories for FedPKI
- Oblix
- Web-based interface for managing/processing employees (registering/deregistering, maintaining data, etc.).
- Based in an LDAP directory, Netscape/MSIIS server-side plugins/ActiveX, Java/Javascript
- Attribute regulation via requests or direct manipulation, person locator via maps, management hierarchy display, public search/access, private access/functions
- See http://cecil.cit.nih.gov:8080/oblix
- Metadirectory

- 1999-06-30

## Metadirectory Issues

- Increase interest in hybrid DIT solutions - Dan Blum
- Zoomit VIA - not a good choice for NIH enterprise
- limited programmability, openness
- questionable database (corruption)
- limited company focus
- lack of company resources/support
- confirmation by directory consultants

- 1999-06-30

## Metadirectory Issues  (cont.)

- MetaConnect - ISOCOR, Netscape
- Haven’t gotten software yet
- Have some manuals, looks promising
- NIH organizational problems
- no standardized abbreviations (lack of uniqueness among siblings, not designated, etc.)
- unofficial organizations

- 1999-06-30

## Problems with Prior Pilot Definition

- Immaturity of LDAP and meta-directory products
- New ID Badge/Card Key moving slowly
- Too many inconsistent, inaccurate, incomplete databases and directories to cope with

- 1999-06-30

## “Fast Track” Goals

- Focus on cleaning/linking minimal set of enterprise DBs and directories
- Obtain experience with Administrative Office, ID Badge, and Telecom Directory business processes and owners

- 1999-06-30

## “Fast Track” Components

- Relational Database
- Record linking engine
- Read-only LDAP directory server
- Web-based registration and update service

- 1999-06-30

## “Fast Track” DBs and Directories

- Core Databases:
- HRDB
- Fellowship Payment System (FPS)
- JEFIC Database
- PAID
- Telecommunications Directory
- NIH Email Directory (PH)

- 1999-06-30

## Highlights of Attribute Changes

**organizationalStatus**:
**N**IH FTE (all in HRDB)
**F**ellow (all in FPS)
**C**ontractor
**G**uest
**V**olunteer
**T**enant (e.g. FDA/CBER)
- Entry effective & expiration dates
- UID quality indicators

- nihPersonStatus:
- Active
- Inactive
- Transferring
- Suspended
- Emergency contact name & phone
- Dropped: secretary, manager

- 1999-06-30

## How good is NIH’s data?

- 1999-06-30

## How do we clean it?

- Data element analysis (frequency distributions, trial-and-error parsing)
- Parsing & Standardization
- Blocking/Clustering (SOUNDEX of surname, given name, street name)
- Record Linking
- Attribute Selection

- 1999-06-30

## How do we assemble it?

- Deduplicate everything
- Create entries from HRDB  FPS  JEFIC
- Link Telecom, select attributes
- Link PAID, select attributes
- Create entries for PAID residuals (mostly “C”s, “G”s, “V”s, and “T”s)
- Link Telecom, select attributes
- Link PH, select attributes

- 1999-06-30

## Record Linking Engine

- Calculates the odds that two records identify the same person
- Needed for:
- Deduplication
- Assigning UIDs to 100s of 1000s of legacy records
- Advanced directory searches, particularly when registering “new” employees
- Based on software from Census Bureau Statistical Research Division
- Invented in 1959

- 1999-06-30

## Directory Steering Committee (DSC)

- Provides a forum for discussing functional requirements, business process issues, and potential uses with stakeholders.
- Membership consists of AOs from various ICs, Parking/ ID Badge representatives, and the Directory Project Team.
- For more information, visit the DSC web site @ http://www.alw.nih.gov/dsc

- 1999-06-30

## Directory Update Service Demo

- Register
- Update
- Deactivate
- Review Submitted Requests
- Search (View Only)
- Administration

- 1999-06-30

## Fast Track Directory Timeline

- Work in Progress:
- Data cleaning
- Develop record linking engine
- Refine web interface; add additional functionality
- Planned Activities
- EO Presentation - July,  1999
- Pilot System (CIT, NCRR and NINR) - July, 1999
- Implement LDAP read only server - July, 1999
- Lessons Learned, review, re-pliot – August, 1999
- Begin Enterprise-wide rollout - September, 1999

- 1999-06-30