How to configure user provisioning to Active Directory in OpenIAM
Format of the Session: Overview of user provisioning. Hands-on exercise for setting up integration. Discussion on access control models. Creation of roles for provisioning. What is Provisioning? Definition User Provisioning: The process of creating user accounts in one or more applications within a corporate environment. Involves pushing user profile information and entitlements (permissions) associated with those accounts. Importance Attribute Variability: Different applications have different requirements for user attributes. Active Directory & LDAP: More flexible with customizable attributes. AWS/Salesforce: Limited and specific attributes that are necessary for those services. Key Aspects of Provisioning Account Creation: Establishing new user accounts. Modification: Updating user accounts based on: Job changes (e.g., title, department). Personal life changes (e.g., name changes). De-provisioning: Terminating access for users who no longer need it. Synchronization vs. Provisioning Synchronization: One-way process where information is pulled from a source (e.g., Active Directory) into OpenIAM. Provisioning: It's the process where data is pushed from OpenIAM to the target application (e.g., creating or updating accounts in Active Directory).
Format of the Session:
- Overview of user provisioning.
- Hands-on exercise for setting up integration.
- Discussion on access control models.
- Creation of roles for provisioning.
What is Provisioning?
Definition
User Provisioning: The process of creating user accounts in one or more applications within a corporate environment.
- Involves pushing user profile information and entitlements (permissions) associated with those accounts.
Importance
- Attribute Variability: Different applications have different requirements for user attributes.
- Active Directory & LDAP: More flexible with customizable attributes.
- AWS/Salesforce: Limited and specific attributes that are necessary for those services.
Key Aspects of Provisioning
- Account Creation: Establishing new user accounts.
- Modification: Updating user accounts based on: Job changes (e.g., title, department). Personal life changes (e.g., name changes).
- De-provisioning: Terminating access for users who no longer need it.
Synchronization vs. Provisioning
Synchronization:
One-way process where information is pulled from a source (e.g., Active Directory) into OpenIAM.
Provisioning:
It's the process where data is pushed from OpenIAM to the target application (e.g., creating or updating accounts in Active Directory).