.. SPDX-FileCopyrightText: 2024 Univention GmbH
..
.. SPDX-License-Identifier: AGPL-3.0-only

.. index::
   pair: overview; capabilities mapping

.. _capbilitiy-mapping:

******************
Capability mapping
******************

This section maps the capabilities outlined in :ref:`overview-capabilities`
to the functional components outlined in :ref:`overview-components`.
It describes which functional component provides which capability in Univention Nubus.
The structure follows the perspectives from the capabilities.

.. _capbilitiy-mapping-end-user:

End user perspective
====================

:numref:`capbilitiy-mapping-end-user-figure` shows the functional components involved in realizing the
*User account self service*, *Uniform integrated user interface*, and *Single Sign-On /
Single Sign-Out* capabilities.
It shows the dependency chain of the functional components that play a critical role in achieving the capabilities outlined.

.. _capbilitiy-mapping-end-user-figure:

.. figure:: /images/Capability_Mapping_End_User_Perspective.*
   :target: ../_images/Capability_Mapping_End_User_Perspective.svg
   :alt: Capability mapping for end user perspective

   Capability mapping for end user perspective

Identity Store and Directory Service
   The :ref:`overview-components-identity-store`
   is the starting point of functional components
   to realize the capabilities in the end user perspective.
   The Identity Store provides its functionality to the
   *Directory Manager*, *Portal*, and *Identity Provider* functional components.

Identity Provider
   The :ref:`overview-components-identity-provider`
   is the functional component to realize the
   :ref:`capabilites-end-user-perspective-sso` capability.
   It also provides its functionality to the *Authorization Service* functional component.

Portal
   The :ref:`overview-components-portal-service`
   is the functional component that participates in the realization of the
   :ref:`capabilites-end-user-perspective-integrated-user-interface` capability.
   It uses the functionality of the
   *Identity Store and Directory Service*, and *Management UI* functional components.

Directory Manager
   The :ref:`overview-components-directory-manager`
   uses the functionality from the *Identity Store and Directory Service*.
   It provides its functionality to the
   *Management UI* and *Authorization Service* functional components.

Authorization Service
   The :ref:`overview-components-authorization-service`
   uses the functionality from the *Directory Manager* and the *Identity Provider*.
   It provides its functionality to the *Management UI* functional component.

Management UI
   The :ref:`overview-components-management-ui`
   uses the functionality from the *Directory Manager* and the *Authorization Service*.
   It provides its functionality to the *Portal* and *End User Self Service* functional components.

   The *Management UI* also realizes the
   :ref:`capabilites-end-user-perspective-integrated-user-interface` capability
   together with the *Portal* functional component.

End User Self Service
   The :ref:`overview-components-end-user-self-service`
   uses the functionality from the *Management UI*.
   It realizes the :ref:`capabilites-end-user-perspective-self-service` capability.

.. _capbilitiy-mapping-provider-and-operation:

Provider and operation perspective
==================================

:numref:`capbilitiy-mapping-provider-and-operation-figure` shows the functional components involved in realizing the
*Operation in Kubernetes cluster*, *Management of user accounts*, *DVS compatible* (:term:`DVS`), and
*Integration with external IAM systems* (:term:`IAM`) capabilities.
It shows the dependency chain of the functional components that play a critical role in achieving the capabilities outlined.

The capabilities
:ref:`capabilites-provider-and-operation-perspective-kubernetes` and
:ref:`capabilites-provider-and-operation-perspective-dvs`
don't have direct relationships to functional components of Nubus.
However, the architecture of Nubus plays an important role in realizing these capabilities.

.. _capbilitiy-mapping-provider-and-operation-figure:

.. figure:: /images/Capability_Mapping_Provider_and_Operation_Perspective.*
   :target: ../_images/Capability_Mapping_Provider_and_Operation_Perspective.svg
   :alt: Capability mapping for provider and operation perspective

   Capability mapping for provider and operation perspective

Identity Store and Directory Service
   The :ref:`overview-components-identity-store`
   is the starting point of functional components
   to realize the capabilities in the provider and operation perspective.
   The Identity Store provides its functionality to the *Directory Manager* functional component.

Directory Manager
   The :ref:`overview-components-directory-manager`
   uses the functionality from the *Identity Store and Directory Service*.
   It provides its functionality to the
   *Management UI* and *IAM Connector* functional components.

Management UI
   The :ref:`overview-components-management-ui`
   uses the functionality from the *Directory Manager*.
   It provides its functionality to the *End User Self Service* functional component.

   The *Management UI* realizes the
   :ref:`capabilites-provider-and-operation-perspective-user-account-management`
   capability together with the *End User Self Service* functional component.

End User Self Service
   The :ref:`overview-components-end-user-self-service`
   uses the functionality from the *Management UI*.
   It realizes the
   :ref:`capabilites-provider-and-operation-perspective-user-account-management`
   capability together with the *Management UI* capability.

IAM Connector
   The :ref:`overview-components-connectors-iam-connector`
   uses the functionality from the *Directory Manager*.
   It realizes the
   :ref:`capabilites-provider-and-operation-perspective-external-iam-systems` capability.

.. _capbilitiy-mapping-development-governance:

Development and governance perspective
======================================

:numref:`capbilitiy-mapping-development-governance-figure` shows the functional components involved in realizing the
*Support & Maintenance*, *Integration of components and applications*, and
*Available as Open Source Software* capabilities.

The capabilities
:ref:`capabilites-development-and-governance-support` and
:ref:`capabilites-development-and-governance-open-source`
don't have a direct relationships to the functional components of Nubus.
However, the availability of the source code and the professional support and maintenance by Univention
play an important role in the realization of these capabilities.

.. _capbilitiy-mapping-development-governance-figure:

.. figure:: /images/Capability_Mapping_Development_and_Governance_Perspective.*
   :target: ../_images/Capability_Mapping_Development_and_Governance_Perspective.svg
   :alt: Capability mapping for development and governance perspective

   Capability mapping for development and governance perspective

Intercom Service
   The :ref:`overview-components-intercom-service`
   plays a critical role to achieve the :ref:`capabilites-development-and-governance-integration` capability
   together with the *Provisioning Service* functional component.

Provisioning Service
   The :ref:`overview-components-provision-service`
   plays a critical role to achieve the :ref:`capabilites-development-and-governance-integration` capability
   together with the *Intercom Service* functional component.