Magnolia And Idm

Magnolia Conference 2009 © deron GmbH September 2009

Identity Management and Magnolia

Ralf Hirning

Introduction

IDM User Study 2009

IDM Magnolia Integration

IDM – an Overview

Integration ModuleIntegration Module

Introduction

IDM User Study 2009

IDM – an Overview

� Spin Off from Fraunhofer Gesellschaft

� Foundation in 2001

� 25 employees

� Locations

� Headoffice Stuttgart

� Köln / Burscheid

� Hamburg

� Zürich

Company

� 15 years IT consulting and project management

� 10 years CMS projects

� Magnolia projects

� Magnolia training

� Now: Identity Management consulting

Ralf Hirning

Introduction

IDM User Study 2009

IDM – an Overview

IDM: IT Business Process Management

Identity Management Usage

Identity Manag ement E ins atz

In E inführung

In P lanung

introducing

planned

Definition of Processes ...

D e fin itio n d er IT -G es c h ä fts p ro z e s s e

A nlegen A k tivieren D eak tivieren L ös c hen

IT -G e sc h ä ftsp ro z e sse

Interner Mitarbeiter [mit IdM] Interner Mitarbeiter [ohne IdM]

E x terner Mitarbeiter [mit IdM] E x terner Mitarbeiter [ohne IdM]

create activate deactivate delete

but ...

D e fin itio n d e r Ä n d e ru n g s p ro z e s s e

Namens änderung P as s wortänderung A bteilungs wec hs el Mitarbeiterfunk tion P rojek tmitg lieds c haft V erantwortung

tec hnis c he-/

funk tions ac c ounts

IT -G e sc h ä ftsp ro z e sse d e s Ä n d e rn s

Interner Mitarbeiter [m it IdM] Interner Mitarbeiter [ohne IdM]

E x terner Mitarbeiter [mit IdM] E x terner Mitarbeiter [ohne IdM]

change

password

change

organization

change

function

project

memberresponsibility for

technical accounts

Introduction

IDM User Study 2009

IDM – an Overview

IDM functional layers

Infrastructure:

Provisioning

Authorization managementsynchronization

Business-Layer:

Personal information

Business role modelIT business process

IDM-Layer:

Central identity storeMiddleware

Entry new User information

Approval process

for new accounts

Microsoft

Active Directory

ADS Help Desk

Help Desk SAP

further

applications

Business Processes & IDM Components

Meta-Store für Accounts

Provisioning

Benutzer Self Service

Single Sign On

Public Key Infrastructure

Federation

Bausteine des Identity& Access Management

Workflow-Management

Role Based Access Control

Meta-Store für Accounts

Provisioning

User Self Servie

Single Sign On

Public Key Infrastructure

Federation

Components ofIdentity& Access Management

Workflow-Management

Role Based Access Control

IDM: The classical approach

> Regelbasierte Verarbeitung der Informationen aus HR

> Regelbasierte Weiterverarbeitung der Daten

� data synchronization

� simple initial user setup

� fast implementation

� a complete base installation

is necessary

� no workflow integration

� overall benefits are low

rule based processingof HR data

rule basedprovisioning

� workflow integration

� extended user

administration

� No auditing and reporting

� No role management

IDM: workflows and authorization management

> Personendaten> Orga-Zugehörigkeit

> ...HR

Manager A

> mehrstufiges Genehmigungsverfahren> Eskalationsszenario (Vertreterregelungen, etc...)

Reporting

Manager B

Manager C

User-Self-Service> Access-Right Request> Passwort-Self-Service> ....

> Anlegen des Benutzers und Zuordnung innerhalb der Struktur

> Anlage eines Home-Directorys

> Automatisierte Zuordnung der Gruppenzugehörigkeit

> Regelbasierte Weiterverarbeitung der Daten

Administration

Webfrontend für die IDM-Administration

IDM: business roles & compliance

� audit and reporting in place

� extended user

administration

� Additional expenses

� Long term strategy

necessary

Real Challenge: multiple different Life-Cycles

Anlegen

Verteilerlisten

Life-Cycle

ÄndernLöschen

Sammeluser Life-Cycle

Prüfen

Anlegen

ÄndernLöschen

Projekt-Life-Cycle

Prüfen

Anlegen

Ändern

Anlegen

ÄndernDeaktivieren

Löschen

Mitarbeiter

Life-Cycle

Aktivieren /Reaktivieren

function

organization

project member

deprovisioning

Real Challenge: multiple different change types

Anlegen

ÄndernDeaktivieren

Löschen

Mitarbeiter

Life-Cycle

Aktivieren /Reaktivieren

Real Challenge: organizational change

OU ‘old’ OU ‘new’

New Permissions

Old Permissions

OU = organizational unit

Introduction

IDM User Study 2009

IDM – an Overview

Email Integration

Magnolia

JCRAdmin

Send email

LDAP Integration

LDAP Connector

Magnolia

Direct Integration

Magnolia

Remote Module

Create

Modify

Delete

Introduction

IDM User Study 2009

IDM – an Overview

� Create filter to handle remote requests

� Define a URL pattern for the filter to handle

� /.remote/…

Remote Module - Filter

Remote Module – XML Query<?xml version="1.0" encoding="UTF-8"?>

mgnl-command>

<query repository="users"

language="xpath"

statement="//*"

event-id="0815"/>

</mgnl-command>

Remote Module – XML Create

Remote Module – Config tag handler

� Create tag handler for

� delete

� move

� rename

� …

Ralf Hirningderon GmbHSchelmenwasenstr. 3270567 StuttgartGermany

Magnolia And Idm

Technology

Transcript of Magnolia And Idm

Athento iDM

foX Trekker PC Based Portable X-ray Inspection System ... · WF-IDM- 013 WBA-pp_ 01 SC-IDM- A30 SC-IDM- A31 SC-IDM- 068 SC-IDM- 056 SC-IDM- 057 SC-IDM- 115 SC-IDM- 062 SC-IDM- 069

Magnolia, Salesforce and SAP: a Magnolia 5 App to Capture and Enrich Leads

Catalogo idm

Facebook and Mums - IDM 2011

IDM Web Services Toolkit for Windows IDM Web Services Toolkit for... · IDM Web Services Toolkit for Windows Technical Reference Introduction 1 Overview The IDM Web Services Toolkit

Idm Monitoring

Certificate - IDM

IdM and AC

Genetic diversity of Magnolia ashei characterized by SSR ... · Conservation Genetics 1 3 Magnolia acuminata, Magnolia obovata, Michelia maudiae, Magnolia stellata, Magnolia sieboldii

New varieties of Magnolia biondii and Magnolia cylindrica ......Magnolia Magnolia biondii Magnolia cylindrica Magnoliaceae tetraploid variety Abstract Magnolia biondii var. purpurascens

Magnolia and PHPCR

Magnolia Kickstart: Develop Magnolia Websites Faster, Better and Easier

Magnolia ‘Elizabeth’ Magnolia Collection

University APark-LikeSetting … · 2020. 7. 18. · Magnolia kobus i. Magnolia x loebneri j. Magnolia macrophylla k. Magnolia x soulangeana l. Magnolia stellata m.Magnolia ‘Sundance’

Magnolia CORE - The Ultimate Magnolia CMS Experience

Dreamweaver and idm

The IDM Manual Reports on Using the IDM

IDM, DAPS, Pickups and Risers

IDM concepts