Tennessee Department of Education Architecture

1. Demographic
Assessments
At Risk, SPED, Intervention
Grades, Behavior, Other
Teachers
Single Pane of Glass
Comprehensive Data
Behavioral
Authentication
Administration
Storage
User
Experience
State
Assessments
Authentication
Administration
Storage
User
Experience
Grades
Authentication
Administration
Storage
User
Experience
Local
Assessments
Authentication
Administration
Storage
User
Experience
SPED
Authentication
Administration
Storage
User
Experience
Demographic
Authentication
Administration
Storage
User
Experience
Other
Unstructured
These are real
words that will not
cause any red
squiggly lines in
the automatic spell
checker program
Sometimes I say
to myself, self
what are you
doing?
These are real
words that will not
cause any red
squiggly lines in
the automatic spell
checker program
Sometimes I say
to myself, self
what are you
doing?
These are real
words that will not
cause any red
squiggly lines in
the automatic spell
checker program
Sometimes I say
to myself, self
what are you
doing?
It started with a vision…

2. … that born the “hamburger”

3. … that led to a system architecture
3
Secure State Infrastructure
Unique Person ID
System
Accountability
DataMart
BI Analytics Tools
District Systems
Student
Information
System
Student
Information
System
Student
Information
System
Student
Information
Systems
EDFacts
Files
EDFacts
Files
EDFacts
Files
EDFacts
Files
EDFacts
Files
State
Reports
State
Reports
State
Reports
Student
Information
System
Student
Information
System
Student
Information
System
HR
Systems
Student
Information
System
Student
Information
System
Student
Information
System
Assessment
Systems
Student
Information
System
Student
Information
System
Student
Information
System
Other
Systems
e.g. EasyIEP
Granular data flows
from districts and
other sources
transactionally or
in bulk uploads
Operational Data
Store (ODS)
ODS combines and
unifies current data from
different sources
Student
Performance
Dashboards
Dashboards drive student-
level decision making for
teachers and administators
DataWarehouse
(DW)
Transfer student data
automatically flows to
the new school upon
enrollment
Unique identity is
maintained throughout
the system
Unified and validated data
moves to thedata warehouse
Snapshots of data and
aggregates arecaptured for
accountability reporting
Warehouseholds
 Near-real-timeoperational data
 Historical/longitudinal data
 Accountability data
 KPIs
Single Sign-On
Identity Management System
Data on a person’s
roles and
assignments and the
students they teach
determine access to
application and data
Transactional
Web Service
Interface
Bulk Data
Interface
UniquePerson ID
Web Service
Student Data
Record Transfer
Service
Analytics
Views

4. … with a bold generative API approach
7/27/2014
4

5. … and an unprecedented Azure identity
solution
School Districts with
Tennessee Department of
Education
Identity Synchronization
Cloud Identity Provisioning
Federated Authentication
Federation Hub
Azure Access Control
Server (ACS 2.0)
Claims taken from
Application Database
Active Directory Federation Services
School District
With internal AD Domain
and ADFS
ODS Application
Database (provided by
DLP)
FIM Synchronization
Server
Claims-Aware
Application
State Managed
Azure AD