How to configure user provisioning to Active Directory in OpenIAM

Format of the Session: Overview of user provisioning. Hands-on exercise for setting up integration. Discussion on access control models. Creation of roles for provisioning. What is Provisioning? Definition User Provisioning: The process of creating user accounts in one or more applications within a corporate environment. Involves pushing user profile information and entitlements (permissions) associated with those accounts. Importance Attribute Variability: Different applications have different requirements for user attributes. Active Directory & LDAP: More flexible with customizable attributes. AWS/Salesforce: Limited and specific attributes that are necessary for those services. Key Aspects of Provisioning Account Creation: Establishing new user accounts. Modification: Updating user accounts based on: Job changes (e.g., title, department). Personal life changes (e.g., name changes). De-provisioning: Terminating access for users who no longer need it. Synchronization vs. Provisioning Synchronization: One-way process where information is pulled from a source (e.g., Active Directory) into OpenIAM. Provisioning: It's the process where data is pushed from OpenIAM to the target application (e.g., creating or updating accounts in Active Directory).

Mar 17, 2025 - 14:04
 0
How to configure user provisioning to Active Directory in OpenIAM

Format of the Session:

  1. Overview of user provisioning.
  2. Hands-on exercise for setting up integration.
  3. Discussion on access control models.
  4. Creation of roles for provisioning.

What is Provisioning?

Definition
User Provisioning: The process of creating user accounts in one or more applications within a corporate environment.

  • Involves pushing user profile information and entitlements (permissions) associated with those accounts.

Importance

  • Attribute Variability: Different applications have different requirements for user attributes.
  • Active Directory & LDAP: More flexible with customizable attributes.
  • AWS/Salesforce: Limited and specific attributes that are necessary for those services.

Key Aspects of Provisioning

  1. Account Creation: Establishing new user accounts.
  2. Modification: Updating user accounts based on: Job changes (e.g., title, department). Personal life changes (e.g., name changes).
  3. De-provisioning: Terminating access for users who no longer need it.

Synchronization vs. Provisioning

Synchronization:
One-way process where information is pulled from a source (e.g., Active Directory) into OpenIAM.
Provisioning:
It's the process where data is pushed from OpenIAM to the target application (e.g., creating or updating accounts in Active Directory).

Image description