FIWARE Academy Courses Identity Management - Keyrock GE Lesson 5 - Installing Keyrock in your own infrastructure  https://edu.fiware.org/course/view.php?id=79 Álvaro Alonso UPM-DIT. Security Chapter FIWARE Academy https://edu.fiware.org http://fiware.org

1. Identity Management - Keyrock GE
Lesson 5 - Installing Keyrock in your own infrastructure
Álvaro Alonso. UPM – DIT
Security Chapter. FIWARE
aalonsog@dit.upm.es, @larsonalonso

2. Contents
1. Keyrock architecture
2. Installing and configuring your own instance

3. Keyrock architecture
• Horizon
– Fron-end component
– User views
• Keystone
– Back-end component
– Resources management
– Connection to data base
Horizon
Keystone
DB

4. Keyrock extended architecture
• Horizon
– Fron-end component
– User views
• Keystone
– Back-end component
– Resources management
– Connection to data base
• AuthZForce
– Permissions management
– PAP and PDP
Horizon
Keystone
DB
AuthZForce
DB

5. Horizon
Openstack Horizon
FIWARE UI
AuthZForce Driver
OAuth2
Driver
FIWARE
Accounts
Admin toolsreCaptcha

6. Keystone
Openstack Keystone
Keystone API
SCIM 2.0
User RegistrationTwo factor auth
OAuth2

7. Installing Horizon and Keystone
• Quick installation guide
– http://fiware-idm.readthedocs.io/en/latest/introduction.html#how-to-
build-install
• Detailed installation guide
– http://fiware-idm.readthedocs.io/en/latest/admin_guide.html#step-by-
step-installation

8. Identity Management - Keyrock GE
Lesson 5 - Installing Keyrock in your own infrastructure
Álvaro Alonso. UPM – DIT
Security Chapter. FIWARE
aalonsog@dit.upm.es, @larsonalonso