Skip to main content

Expected architecture on IAM System

Tech Stack

WSO2 Identity Server

As IS (Identity Servers) there are two most popular ones as 
  • WSO2 Identity Server
  • Microsoft Identity Server
We have chosen WSO2 IS with consideration to support and favourable architecture for our expected architecture. Where as several multiple authentication features comes in one package.

OpenLDAP

WOS2 IS usually comes with embedded LDAP with the system. Yet we need to maintain a user store (store with users data of a system) externally.

 OpenLDAP is a free, open source, lightweight Directory Access protocol to maintain user data.

MySQL Community Edition

Free, Open Source, Relational database for meta data storage.

OpenID Connect

Identity layer on top of the OAuth 2.0 protocol. Will be used as SSO for any service within the organization.

Docker [Docker-Compose] (for the time being)

Focus is to deploy on Kubernetes. Yet docker-compose will be used for the time being. Therefore required docker images and containers are to be maintained.

Comments

  1. Anonymous5 December 2022 at 05:42

    Providing adequate air flow, putting in mist collectors and tramp oil removing methods assist keep the air clean and the factory precision machining flooring freed from oil. Making positive everyone has and makes use of proper safety tools corresponding to listening to and vision safety is also be|can be} essential. On the other hand, if yours is a small CNC machine store, you could not give a lot thought to employee unions.

    ReplyDelete

Post a Comment

Popular posts from this blog

Creating docker image for WSO2 IS Server

So before meddling with configuration, we can run Identity Server right on spot with downloaded zip file [ download ]. Prerequisites for the server is: Java 7 or 8  Let's first download the zip and run the server and make sure there's no failure in it. Unzip and goto folder on terminal and run  Unix $ sh bin/wso2server.sh Windows C:/> wso2server.sh Find the docker image for the sever to run. In this case I realized best to find the lowest possible capacity consuming docker with OS.  For this I have 3 options as below: ubuntu + java size on disk: 778MB Ubuntu 16.04 with Java 8 docker link oracle linux + java size on disk: 280MB Oracle Linux 7.5 with Java 8 docker link alpine + java size on disk: 126MB Apline 3.7.1 with Java 8 docker link Then we have to copy Identity Server files to selected image. At this stage I thought of going with ubuntu, since I have worked and tested on it successfully, and it is...
Post a Comment
Read more

Configuring WSO2 IS with External OpenLDAP

Setup guide: [ link ] At each change you may run the following bash file to on Unix environment for run the dockers. $ sh docker-up.sh OpenLDAP Add object classes We first have to add following object classes: [ link ] After when you have downloaded the ldif files setup them on a folder so that they can be copied in to ldap image we are building.[ link ] Observe here we do not use Dockerfile or docker-compose.yml to run ldap commands. This is because we cannot use the docker command 'RUN' for 'ldapadd' since the slapd service (ldap service name) need to be up and running first. So basic docker practice is using 'CMD' to run the command when the container is up. Yet having 'CMD' run will mess up openldap image developed by Osixia (so some reason I have not disclosed yet). For this I used a bash file to run the docker-compose and then execute commands on ldap container with given container name. Add Organizational Units Add Organizati...
Post a Comment
Read more

Implementing IAM Architecture

So here I started developing 'docker-compose.yml' file from ground level. So I will end up with clean configuration. Previous to this I have built own 'WSO2-IS server docker image'. You may may find it on this [ link ]. Following is my Github repo for this full implementation. https://github.com/MrClemRkz/iam-with-wso2 Running WSO2 Identity Server As of the first commit [ link ]  I start off with docker-composer.yml file with just running the same image I had built previously. So when you are to run the file, make sure you have properly installed docker along with docker-compose.  Run the following command to create the wos2-is container up and running. $ docker-compose up -d Here observe the option '-d'. Since this means container is run detached to the running terminal, it won't show any of the IS output of logs on the terminal. There for either you wait a minute or two until the server is ready or run the command without option '-...
Post a Comment
Read more