Přeskočit na hlavní obsah

Identity Management - IDM

Overview​

Identity management (IDM), also known as identity and access management (IAM or IDAM), is a framework of policies and technologies for ensuring that the proper people in an enterprise have the appropriate access to technology resources. IDM systems fall under the overarching umbrellas of IT security and Data Management.

Identity management have multiple services:

  • IDP - Identity Provider service -> Authentication (SSO)
    • OpenAPI specification: https://[HostName]/api/asol/idp/swagger
  • IDM - Identity Manager service -> Authorization
    • OpenAPI specification: https://[HostName]/api/asol/idm/swagger
  • IDMSM - Subject Manager service -> Person and Organization data
    • OpenAPI specification: https://[HostName]/api/asol/idmsm/swagger

Note: OpenAPI specification (Swagger) is disabled on production stage. You can gets it from development stages only.

Dependencies between services

Prerequisites​

Identity Provider service (IDP)​

Identity provider is a service that enables SSO (single sign-on) authentication of users and services.

Key features:

  • Authentication, Authorization - Verify identity of person or service and create access token as proof of this verified identity. IDP processes authorizations only for tenants and mandants. The service does not take into account the authorization of rights and roles.
  • Single sign-on (SSO) - IDP service designed as a single point of trusted authentication for all services and applications.
  • Multitenancy, Multi-company - Support Multitenancy and Multi company data management and data isolation.

Identity Manager service (IDM)​

Identity manager is a service that provide role based authorization for others services and applications.

Key features:

Subject Manager service (IDMSM)​

Subject manager service scope is management for Person (contacts) and Organization (contacts) data and general master data as Countries, Organization Legal Forms, etc.

Key features: