Skip to main content

Expected architecture on IAM System

Tech Stack

WSO2 Identity Server

As IS (Identity Servers) there are two most popular ones as 
  • WSO2 Identity Server
  • Microsoft Identity Server
We have chosen WSO2 IS with consideration to support and favourable architecture for our expected architecture. Where as several multiple authentication features comes in one package.

OpenLDAP

WOS2 IS usually comes with embedded LDAP with the system. Yet we need to maintain a user store (store with users data of a system) externally.

 OpenLDAP is a free, open source, lightweight Directory Access protocol to maintain user data.

MySQL Community Edition

Free, Open Source, Relational database for meta data storage.

OpenID Connect

Identity layer on top of the OAuth 2.0 protocol. Will be used as SSO for any service within the organization.

Docker [Docker-Compose] (for the time being)

Focus is to deploy on Kubernetes. Yet docker-compose will be used for the time being. Therefore required docker images and containers are to be maintained.

Comments

  1. Anonymous5 December 2022 at 05:42

    Providing adequate air flow, putting in mist collectors and tramp oil removing methods assist keep the air clean and the factory precision machining flooring freed from oil. Making positive everyone has and makes use of proper safety tools corresponding to listening to and vision safety is also be|can be} essential. On the other hand, if yours is a small CNC machine store, you could not give a lot thought to employee unions.

    ReplyDelete

Post a Comment

Popular posts from this blog

Initial post

What? I would rather call this my tech journal. So this is merely a tracker for reference. Why? Right when I joined LSF (Lanka Software Foundation) is was informed as we are to research on the work we are to start, better if we could maintain blogs. It has been 3 weeks, I have successfully started three articles on pop blog platform; Medium. Non of them are completed thus not published. Because any writer expects best start with a best ending with proper management of the content distribution within the article. (I guess reading that sentence even bore you out. LOL) However it is, I thought to myself, whatever I think or do, is important to be recorded, in free manner. Therefore here I go. What I am into.. Before I get to the bigger picture, let me start with what I am assigned to first. In simple terms it's platform for IAM (Identity Access Management) System for SL Government institutes.  (Of course whatever we build is free and open source, so can be used ...
Post a Comment
Read more

Implementing IAM Architecture

So here I started developing 'docker-compose.yml' file from ground level. So I will end up with clean configuration. Previous to this I have built own 'WSO2-IS server docker image'. You may may find it on this [ link ]. Following is my Github repo for this full implementation. https://github.com/MrClemRkz/iam-with-wso2 Running WSO2 Identity Server As of the first commit [ link ]  I start off with docker-composer.yml file with just running the same image I had built previously. So when you are to run the file, make sure you have properly installed docker along with docker-compose.  Run the following command to create the wos2-is container up and running. $ docker-compose up -d Here observe the option '-d'. Since this means container is run detached to the running terminal, it won't show any of the IS output of logs on the terminal. There for either you wait a minute or two until the server is ready or run the command without option '-...
Post a Comment
Read more

Creating docker image for WSO2 IS Server

So before meddling with configuration, we can run Identity Server right on spot with downloaded zip file [ download ]. Prerequisites for the server is: Java 7 or 8  Let's first download the zip and run the server and make sure there's no failure in it. Unzip and goto folder on terminal and run  Unix $ sh bin/wso2server.sh Windows C:/> wso2server.sh Find the docker image for the sever to run. In this case I realized best to find the lowest possible capacity consuming docker with OS.  For this I have 3 options as below: ubuntu + java size on disk: 778MB Ubuntu 16.04 with Java 8 docker link oracle linux + java size on disk: 280MB Oracle Linux 7.5 with Java 8 docker link alpine + java size on disk: 126MB Apline 3.7.1 with Java 8 docker link Then we have to copy Identity Server files to selected image. At this stage I thought of going with ubuntu, since I have worked and tested on it successfully, and it is...
Post a Comment
Read more