CERN Authorization Service data model

CERN’s public reference for identities, accounts, groups and applications in the Authorization Service.

What it anchors

• An identity can represent a person, service or application and can have accounts from CERN, eduGAIN or social providers.
• Most identity information is read-only and synchronized from HR’s Foundation database.
• Accounts carry lifecycle-related resource categories and ownership fields.