Skip to main content

Implementing IAM Architecture

So here I started developing 'docker-compose.yml' file from ground level. So I will end up with clean configuration.

Previous to this I have built own 'WSO2-IS server docker image'. You may may find it on this [link].

Following is my Github repo for this full implementation.
https://github.com/MrClemRkz/iam-with-wso2

Running WSO2 Identity Server

As of the first commit [link] I start off with docker-composer.yml file with just running the same image I had built previously.

So when you are to run the file, make sure you have properly installed docker along with docker-compose. 

Run the following command to create the wos2-is container up and running.
$ docker-compose up -d
Here observe the option '-d'. Since this means container is run detached to the running terminal, it won't show any of the IS output of logs on the terminal. There for either you wait a minute or two until the server is ready or run the command without option '-d'.

When the server is up try:
https://localhost:9443/carbon

Login using; 
Username: admin
Password : admin

OpenLDAP with phpldapadmin

On this commit [link] you may find the domain name environment variable used in the docker file. For this I have used "wso2.com". 

When the containers are up and running check for the following url to use phpldapadmin to login to OpenLDAP and make sure to it is configured well to run.

On this scenario, since the domain we have used, the credentials as follows.
Username: cn=admin,dc=wso2,dc=com
Password: admin

MySQL Server setup

Update the docker-compose.yml file as shown in this commit [link].

Comments

Popular posts from this blog

Initial post

What? I would rather call this my tech journal. So this is merely a tracker for reference. Why? Right when I joined LSF (Lanka Software Foundation) is was informed as we are to research on the work we are to start, better if we could maintain blogs. It has been 3 weeks, I have successfully started three articles on pop blog platform; Medium. Non of them are completed thus not published. Because any writer expects best start with a best ending with proper management of the content distribution within the article. (I guess reading that sentence even bore you out. LOL) However it is, I thought to myself, whatever I think or do, is important to be recorded, in free manner. Therefore here I go. What I am into.. Before I get to the bigger picture, let me start with what I am assigned to first. In simple terms it's platform for IAM (Identity Access Management) System for SL Government institutes.  (Of course whatever we build is free and open source, so can be used ...

Expected architecture on IAM System

Tech Stack WSO2 Identity Server As IS (Identity Servers) there are two most popular ones as  WSO2 Identity Server Microsoft Identity Server We have chosen WSO2 IS with consideration to support and favourable architecture for our expected architecture. Where as several multiple authentication features comes in one package. OpenLDAP WOS2 IS usually comes with embedded LDAP with the system. Yet we need to maintain a user store (store with users data of a system) externally. OpenLDAP is a free, open source, lightweight Directory Access protocol to maintain user data. MySQL Community Edition Free, Open Source, Relational database for meta data storage. OpenID Connect Identity layer on top of the OAuth 2.0 protocol. Will be used as SSO for any service within the organization. Docker [Docker-Compose] (for the time being) Focus is to deploy on Kubernetes. Yet docker-compose will be used for the time being. Therefore required docker images and containers ...