Recognizing that customers have an increasingly complex IT environment that includes both on-premise applications and cloud-based applications, the SCUID Lifecycle solution has been architected for maximum flexibility and complete coverage. The architecture consists of two provisioning gateways - Identity Connector for the Enterprise (ICE) and Identity Connector for the Cloud (IC2).

ICE (Identity Connector for the Enterprise) is a virtual appliance that sits within the customers data center(s) and integrates directly with the customers on-premise applications using the most appropriate mechanisms - SPML, LDAP, JDBC or native APIs. It also allows SCUID Lifecycle to connect to the customers on-premise identity environment (Active Directory or LDAP). This helps customers avoid the need to open up their on-premise IT environment to the cloud, and decouples the operation and management of the integration environment from the Lifecycle server.
IC2 (Identity Connector for the Cloud) is a cloud-based provisioning gateway that enables SCUID Lifecycle customers to immediately extend user management to their Software-as-a-Service (SaaS) providers. This allows corporations to automate the on-boarding, off-boarding and orphan account reporting for their cloud-based applications with capabilities at par with traditional enterprise applications today. IC2 is also available as a standalone SaaS offering that can be leveraged by other provisioning engines (read more).