Chapter 44 — Engineering capstone I | Engineering Identity and access management

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 44 published. Map, example, EX130.

flowchart TD
  N0["Learning outcomes"]
  N1["44.1 Choosing the scope"]
  N2["44.2 Planning"]
  N3["44.3 Early delivery"]
  N4["44.4 Managing risk"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX130"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["44.1 Choosing the scope"]
  N2["44.2 Planning"]
  N3["44.3 Early delivery"]
  N4["44.4 Managing risk"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX130"]

[Learning outcomes]
    |
    v
[44.1 Choosing the scope]
    |
    v
[44.2 Planning]
    |
    v
[44.3 Early delivery]
    |
    v
[44.4 Managing risk]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX130]

Learning outcomes

You will (1) define the capstone scope from remaining gaps; (2) plan work and evidence; (3) begin delivery with clear milestones.

44.1 Choosing the scope

The capstone draws on everything so far. Sana chooses to close the largest remaining gap: the twenty applications outside full single sign-on and automated lifecycle. Her scope is to bring at least twelve of them under the provider with automated leaver removal and to put the rest on documented, monitored interim controls. The scope is agreed with Dr Hale and the council, with clear success criteria, because a capstone without boundaries tends to expand until nothing is finished well. The criteria are written into the plan.

44.2 Planning

Sana plans the work in milestones: classify each application and its options; build proxies or connectors in the test tenant; verify with tests; migrate users in small groups; and measure leaver removal for each. Each milestone has deliverables and evidence requirements, linked to the traceability matrix. She identifies dependencies, such as vendor support for SCIM and a proxy licence, and risks, such as a vendor delay, with planned responses. The plan is reviewed fortnightly with her supervisor and the identity team lead.

44.3 Early delivery

The first milestone classifies the twenty applications: seven can use the provider through a proxy, five have new vendor versions supporting standard federation and provisioning, four need scripted checks permanently and four are due for retirement within a year. Sana starts with two proxy applications in the test tenant, because they share a pattern and success there will speed the others. She records time spent per application, so later estimates are based on measured effort rather than guesses. Measured effort per application improves later estimates.

44.4 Managing risk

Two weeks in, a vendor announces that its federation-capable version is delayed by three months. Sana updates the plan: that application moves to the interim group with a monitored scripted check, and another application from the proxy group takes its place to keep the target achievable. She records the change, its reason and its effect on the capstone scope in the decision log, and informs the council. Adapting openly to risks is part of engineering; pretending the plan is unchanged is not.

Worked example

Twenty applications are classified as 7 proxy, 5 modern federation, 4 permanent scripted check and 4 retiring; a vendor delay moves one application to interim controls without changing the target of twelve.

Synthetic case. Applications, vendors and timings are synthetic.

Errors and limits

Hiding a plan change caused by a supplier delay leaves stakeholders with false expectations.

Exercises

EX130 — Capstone target. What is the capstone's main target?
Show marking criteria
Rubric: 3 = at least twelve of twenty apps under provider with automated leaver removal;; 2 = twelve;; 1 = all;; 0 = none.
EX131 — Classification counts. How are the twenty applications classified?
Show marking criteria
Rubric: 3 = 7 proxy, 5 modern, 4 scripted, 4 retiring;; 2 = four groups;; 1 = one;; 0 = none.
EX132 — Delay response. How does Sana respond to the vendor delay?
Show marking criteria
Rubric: 3 = move app to interim, substitute another, record and inform;; 2 = adapt;; 1 = wait;; 0 = none.

Synthesis

A bounded capstone with milestones, evidence requirements and openly managed risks gives the final year a solid structure.

Continue studying — chapter 44 of 50

← Chapter 43 (draft) · Course chapter index · Chapter 45 (draft) →