Downloaded 396 times
![Connector Configuration (flexible)
"principal" : "cn=Directory Manager",
"ssl" : false,
"baseContexts" : ["ou=People,dc=example,dc=com"],
"groupMemberAttribute" : "uniqueMember",
"passwordAttribute" : "userPassword",
"accountSearchFilter" : null,
"accountObjectClasses" : ["top",...],
"maintainLdapGroupMembership" : false,
"blockSize" : 100,
"baseContextsToSynchronize" :
["ou=People,dc=example,dc=com"],
"attributesToSynchronize" : [ "uid",...],
{"account" :
...
{"nativeType" : "__ACCOUNT__",
"properties" :
{"uid" :
{"type" : "string",
"nativeName" : ”userName",
"nativeType" : "STRING",
"flags" :
["NOT_CREATABLE”…
01-25](https://image.slidesharecdn.com/introopenidmsummitslides-131031130139-phpapp01/75/OpenIDM-An-Introduction-25-2048.jpg)
Uploaded byForgeRock
OpenIDM - An Introduction
This document provides an overview of OpenIDM for beginners. It describes where OpenIDM fits within identity and access management. OpenIDM addresses common identity management use cases like provisioning, deprovisioning, compliance and auditing, and password management. It utilizes connectors to interface with external systems and repositories. Workflow engines like Activiti can be integrated to automate approval processes. The document demonstrates OpenIDM configuration and provides an example of implementing a user provisioning workflow.
Technologyâ—¦
More Related Content
Similar to OpenIDM - An Introduction
![Coded Agents – with UiPath SDK + LangGraph [Virtual Hands-on Workshop]](https://cdn.slidesharecdn.com/ss_thumbnails/codedagentsdeck-251215155422-5497c599-thumbnail.jpg?width=640&height=640&fit=bounds)
OpenIDM - An Introduction
- 1. OpenIDM for Beginners EMEASummit 2013
- 2. Objectives Upon completion ofthis presentation, you should be able to: • Describe where OpenIDM fits into the OIS • Describe the Business Needs for OpenIDM • Describe IDM Use Cases Addressed by OpenIDM • Describe OpenIDM Features 01-2
- 3.
- 4. Classic scenario I Userwants to use an application... which does not require any of ForgeRock's products, but ... Application User 01-4
- 5. Classic scenario II Centralizationof Authentication … and ... Application OpenDJ User 01-5
- 6. Classic scenario III CentralAuthorization OpenAM OpenDJ Application User 01-6
- 7. Classic scenario V IdentityManagement OpenAM Application HR DB OpenIDM OpenDJ User 01-7
- 8. Common Use Cases • Provisioning • De-Provisioning • Complianceand auditing • Password management 01-8
- 9. Provisioning • Depending on auser's business role and predefined rules a new user will: • • • Therefore a central instance is needed which • • • • Get accounts on backend systems on create Get default group/role membership Connects to all relevant systems Is able to sync user attributes and memberships Can automatically apply rules Manager, approving persons and end-user need well defined access to the user's data 01-9
- 10. Central Provisioning Point HRDB OpenIDM User 01-10
- 11. Passwords • Passwords can bechanged at a central place and distributed to external systems based on flexible rules and password policies • The provisioning engine needs to detect password changes from an external resource • User administrators and end user need well defined access to the user's passwords • A password reset mechanism is in place • Passwords which have been reset can be sent to the end user in a secure way 01-11
- 12. Central Password DistributionPoint User Changes Password OpenIDM OpenDJ 01-12
- 13. Components used inOpenIDM  Java → min 1.6 update 24 on Win: Java 7  OSGi → implementation: Felix  Servlet container → implementation: Jetty  Repository → OrientDB, MySQL and others  JSON → structure for configurations  OpenICF → local or remote connector server  Connectors to external systems → i.e. AD, LDAP, file...  Activiti → workflow engine 01-13
- 14. Putting It AllTogether 01-14
- 15. The REST Interface    RepresentationalState Transfer (REST) Conforming to the REST constraints is generally referred to as being "RESTful" REST utilizes HTTP methods:      GET PUT POST DELETE HEAD 01-15
- 16. OpenIDM in action • InstallOpenIDM • Start with workflow sample • Get user through reconciliation • Start 01-16
- 17.
- 18.
- 19. Activiti Introduction  A light-weightworkflow and Business Process Management Software  BPMN 2 compliant  A process engine for Java applications  It's open-source and distributed under the Apache license  Workflows are deployed as business archives (.bar)  Workflow definitions are in XML format 01-19
- 20. Apply for ContractorI Workflow outline 01-20
- 21. Apply for ContractorII Startup Form: (Screen shot) 01-21
- 22.
- 23.
- 24.
- 25. Connector Configuration (flexible) "principal": "cn=Directory Manager", "ssl" : false, "baseContexts" : ["ou=People,dc=example,dc=com"], "groupMemberAttribute" : "uniqueMember", "passwordAttribute" : "userPassword", "accountSearchFilter" : null, "accountObjectClasses" : ["top",...], "maintainLdapGroupMembership" : false, "blockSize" : 100, "baseContextsToSynchronize" : ["ou=People,dc=example,dc=com"], "attributesToSynchronize" : [ "uid",...], {"account" : ... {"nativeType" : "__ACCOUNT__", "properties" : {"uid" : {"type" : "string", "nativeName" : ”userName", "nativeType" : "STRING", "flags" : ["NOT_CREATABLE”… 01-25
- 26. Other OpenIDM Features  TaskScheduling  Cluster OpenIDM for   High availability Horizontal scalability  OpenIDM command line  Data validation through policies  Managing Passwords  Send emails 01-26
- 27.