Relay Core Connector Ldap Bundle Laravel Package

Product Decisions This Supports

• Identity & Access Management (IAM) Integration: Enables seamless LDAP-based authentication/authorization for Relay API Gateway, reducing reliance on custom solutions or third-party SaaS tools (e.g., Okta, Auth0).
• Enterprise SSO Roadmap: Accelerates adoption of LDAP/Active Directory for internal tools, aligning with corporate identity providers (e.g., Microsoft AD, OpenLDAP).
• Build vs. Buy: Avoids reinventing LDAP connectors for Relay, leveraging a pre-built, AGPL-licensed solution (note compliance implications for proprietary stacks).
• Use Cases:
  • Internal developer portals or API gateways requiring LDAP-backed auth.
  • Legacy system integration where LDAP is the source of truth for user roles/groups.
  • Compliance-heavy environments needing audit trails for authorization data.

When to Consider This Package

• Adopt if:

  • Your Relay API Gateway needs LDAP integration with minimal custom code.
  • Your team lacks LDAP expertise but requires quick implementation.
  • You’re already using Relay and need a standardized AuthorizationDataProviderInterface.
  • Your license allows AGPL-3.0 (or you can fork/modify under a compatible license).

• Look elsewhere if:

  • You need multi-protocol support (e.g., SAML, OAuth) beyond LDAP.
  • Your LDAP environment is highly customized (e.g., non-standard schemas, complex queries).
  • You require commercial support or SLAs (package has none).
  • Your stack is proprietary and AGPL-3.0 is incompatible (risk of GPL contamination).
  • You prefer managed services (e.g., AWS Cognito, Azure AD) over self-hosted LDAP.

How to Pitch It (Stakeholders)

For Executives: "This package lets us integrate LDAP authentication into our Relay API Gateway without building a custom connector—saving 3–6 months of dev time. It’s a lightweight, open-source solution that aligns with our existing Active Directory, reducing friction for internal tools. The AGPL license is a consideration, but we can mitigate risks by isolating the bundle or negotiating a commercial license with Digital Blueprint."

For Engineering: "The AuthorizationDataProviderInterface implementation handles LDAP queries for user roles/groups, plugging directly into Relay. Setup is straightforward (Composer install + config), and the bundle abstracts LDAP-specific logic. We’d need to validate its performance under our LDAP load and ensure it meets our schema requirements, but it’s a solid starting point for SSO. Trade-off: AGPL-3.0 means we’d need to open-source this component or pay for a license."