New design introduces few powerfull concepts
- API/SPI separation that should enable easier adoption of different identity managers or identity stores in the future.
- Notion of Identities and Groups (organizations) with flexible relationships between them
- Concept of a Role that is a typed connection between Identity and Group object. This enables to map sentence like "John is the Manager of XX Team" to "John (Identity) is the Manager (RoleType) of XX Team (Group)"
- Abstract attributes and credentials
We are awaiting your feedback!