{"id":6611,"date":"2023-06-23T10:11:38","date_gmt":"2023-06-23T08:11:38","guid":{"rendered":"https:\/\/www.idstory.com\/?p=6611"},"modified":"2026-08-06T09:37:54","modified_gmt":"2026-08-06T07:37:54","slug":"co-je-to-identity-management","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/co-je-to-identity-management\/","title":{"rendered":"Co je to Identity Management"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\tIdentity Management (IdM) je centralizovan\u00e1 spr\u00e1va identit v IT syst\u00e9mech. Umo\u017e\u0148uje spr\u00e1vn\u00fdm osob\u00e1m p\u0159\u00edstup ke spr\u00e1vn\u00fdm zdroj\u016fm, ve spr\u00e1vn\u00fd \u010das, ze spr\u00e1vn\u00fdch d\u016fvod\u016f a s plnou evidenc\u00ed. IT syst\u00e9my jsou typicky heterogenn\u00ed a jsou dostupn\u00e9 po intern\u00ed s\u00edti. Spr\u00e1va je prov\u00e1d\u011bna z\u00e1sahem administr\u00e1tora v IdM nebo automatizovan\u00fdmi procesy.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Co je identita?<\/strong><\/h3>

Identita je elektronick\u00e1 reprezentace osoby nebo objektu (nap\u0159\u00edklad po\u010d\u00edta\u010de nebo telefonu) z re\u00e1ln\u00e9ho sv\u011bta.\u00a0Identity Management v IT centr\u00e1ln\u011b \u0159\u00edd\u00ed p\u0159\u00edstup identit ke zdroj\u016fm (\u00fa\u010dt\u016fm, vpn, certifik\u00e1t\u016fm) nap\u0159\u00ed\u010d spravovan\u00fdmi IT syst\u00e9my.<\/p>

Co je Identity Manager?<\/strong><\/h3>

Identity Manager je SW, n\u00e1stroj, kter\u00fd zaji\u0161\u0165uje identity management. Jedn\u00e1 se o procesn\u00ed n\u00e1stroj, kter\u00fd m\u00e1 komunika\u010dn\u00ed rozhran\u00ed do mnoha spravovan\u00fdch syst\u00e9m\u016f. Identity Manager integruje spravovan\u00e9 syst\u00e9my a umo\u017e\u0148uje nad nimi prov\u00e1d\u011bt procesy a spravovat \u00fa\u010dty. Sou\u010d\u00e1st\u00ed IdM jsou synchroniza\u010dn\u00ed n\u00e1stroje pro p\u0159enos dat, auditn\u00ed a reportovac\u00ed funkce a samoz\u0159ejm\u011b u\u017eivatelsk\u00e9 rozhran\u00ed, kter\u00e9 umo\u017e\u0148uje p\u0159en\u00e9st odpov\u011bdnost za ur\u010dit\u00e9 \u00fakoly na u\u017eivatele.<\/p>

Pro\u010d IdM?<\/h3>

Jak\u00e9 jsou obvykl\u00e9 probl\u00e9my, kter\u00e9 IdM pom\u00e1h\u00e1 \u0159e\u0161it?<\/p>

  1. Nem\u00e1me p\u0159ehled, kdo kam m\u00e1 p\u0159\u00edstupy.<\/li>
  2. Dlouho trv\u00e1 manu\u00e1ln\u00ed zalo\u017een\u00ed \u00fa\u010dtu a nastaven\u00ed pr\u00e1v.<\/li>
  3. Je \u010dasov\u011b n\u00e1ro\u010dn\u00e9 z\u00edskat podklady pro auditn\u00ed kontrolu.<\/li>
  4. U\u017eivatel\u00e9 si nemohou jednodu\u0161e sami za\u017e\u00e1dat o p\u0159\u00edstupy a nad\u0159\u00edzen\u00fd schv\u00e1lit.<\/li>
  5. Administr\u00e1to\u0159i jsou zahlceni rutinn\u00edmi pracemi s nastavov\u00e1n\u00edm p\u0159\u00edstup\u016f.<\/li>
  6. Z\u016fst\u00e1vaj\u00ed \u00fa\u010dty, kter\u00e9 ji\u017e b\u00fdt v syst\u00e9mu nemaj\u00ed.<\/li><\/ol>

    IdM zaji\u0161\u0165uje principi\u00e1ln\u011b n\u011bkolik z\u00e1kladn\u00edch c\u00edl\u016f:<\/p>

    1. Automatizuje rutinn\u00ed procesy<\/strong>\u00a0spr\u00e1vy identit. Ulevuje administr\u00e1tor\u016fm od rutinn\u00edch proces\u016f.\u00a0<\/li>
    2. Centralizuje syst\u00e9my<\/strong>\u00a0pod jedinou spr\u00e1vu \u2013 z\u00edsk\u00e1te p\u0159ehled o p\u0159\u00edstupech v \u00a0syst\u00e9mech. Identifikujete osobu nap\u0159\u00ed\u010d syst\u00e9my.<\/li>
    3. Delegujte spr\u00e1vu<\/strong>\u00a0\u00fa\u010dt\u016f na business vlastn\u00edky. Tj. nap\u0159\u00edklad nad\u0159\u00edzen\u00ed \u017e\u00e1daj\u00ed a schvaluj\u00ed p\u0159\u00edstupy do CRM. Administr\u00e1to\u0159i se maj\u00ed v\u011bnovat rozvoji syst\u00e9m\u016f, ne schvalov\u00e1n\u00ed, zda tam m\u00e1 m\u00edt \u017eadatel dan\u00fd p\u0159\u00edstup.<\/li>
    4. Eviduje, audituje\u00a0<\/strong>operace nad \u00fa\u010dty a pr\u00e1vy. Z\u00edsk\u00e1te rychle podklady pro audity IT.<\/li>
    5. Zv\u00fd\u0161\u00ed\u00a0bezpe\u010dnost<\/strong>\u00a0nap\u0159\u00edklad zamezen\u00edm existence mrtv\u00fdch du\u0161\u00ed. Ji\u017e se nestane, \u017ee pracovn\u00edk po ukon\u010den\u00ed smlouvy m\u00e1 st\u00e1le p\u0159\u00edstupy do syst\u00e9mu a m\u016f\u017ee si odn\u00e9st data.<\/li><\/ol>

      \u00a0<\/h3>

      P\u0159\u00ednosy IdM dle rol\u00ed?<\/h3>
      Pro b\u011b\u017en\u00e9 u\u017eivatele<\/b><\/div>
      1. Reset hesla do v\u0161ech syst\u00e9m\u016f z jednoho m\u00edsta.<\/div><\/li>
      2. \u017d\u00e1dost o p\u0159\u00edstupy bez nutnosti kontaktovat IT helpdesk.<\/li>
      3. P\u0159ehled o opr\u00e1vn\u011bn\u00edch (kam m\u016f\u017eu, kdo mi to schv\u00e1lil, kdy jsem p\u0159\u00edstup dostal, na koho \u010dek\u00e1 schv\u00e1len\u00ed).<\/div><\/li>
      4. P\u0159ehled o sv\u00fdch pracovn\u00edch \u00favazc\u00edch a nav\u00e1zan\u00fdch pr\u00e1vech.<\/div><\/li>
      5. Rychl\u00fd n\u00e1stup do zam\u011bstn\u00e1n\u00ed pomoc\u00ed automatick\u00e9ho p\u0159id\u011blen\u00ed p\u0159\u00edstup\u016f<\/li><\/ol>
        \u00a0<\/div>
        Pro nad\u0159\u00edzen\u00e9<\/strong><\/div>
        1. P\u0159ehled o pr\u00e1vech pod\u0159\u00edzen\u00fdch + mo\u017enost je m\u011bnit \u010di po\u017e\u00e1dat o zm\u011bnu bez z\u00e1sahu IT<\/li>
        2. Reset hesla pod\u0159\u00edzen\u00e9mu, nap\u0159\u00edklad pokud zapomn\u011bl heslo<\/li>
        3. \u010casov\u00e9 omezen\u00ed pr\u00e1v nap\u0159. pro externisty, automatick\u00e9 notifikace<\/li><\/ol>
          \u00a0<\/div>
          Pro IT bezpe\u010dnost.<\/strong><\/div>
          1. Centr\u00e1ln\u00ed auditn\u00ed n\u00e1stroj \u00fa\u010dt\u016f ve firm\u011b<\/li>
          2. Schvalov\u00e1n\u00ed rol\u00ed na z\u00e1klad\u011b jejich d\u016fle\u017eitosti.<\/div><\/li>
          3. \u0158\u00edzen\u00e9 ru\u0161en\u00ed \u00fa\u010dt\u016f po odchodu zam\u011bstnance, zamezen\u00ed mrtv\u00edm du\u0161\u00edm.<\/div><\/li>
          4. Napln\u011bn\u00ed bezpe\u010dnostn\u00edch norem z\u00a0pohledu \u0159\u00edzen\u00ed u\u017eivatelsk\u00fdch pr\u00e1v<\/div><\/li><\/ol>
            \u00a0<\/div>
            Pro IT pracovn\u00edky<\/strong><\/div>
            1. Automatizace manu\u00e1ln\u00ed spr\u00e1vy (odstran\u011bn\u00ed operativy) \u2013 \u00faspora \u010dasu<\/div><\/li>
            2. Jasn\u00fd p\u0159ehled o \u00fa\u010dtech a opr\u00e1vn\u011bn\u00edch nap\u0159\u00ed\u010d spole\u010dnost\u00ed<\/div><\/li>
            3. V\u00fdrazn\u00e9 zjednodu\u0161en\u00ed p\u0159\u00edpravy podklad\u016f pro audit<\/div><\/li><\/ol>
              \u00a0<\/div>
              Pro veden\u00ed organizace<\/strong><\/div>
              1. \u00a0\u00daspora \u010dasu kompetentn\u00edch pracovn\u00edk\u016f<\/div><\/li>
              2. IT se m\u016f\u017ee v\u011bnovat \u00fadr\u017eb\u011b a rozvoji prost\u0159ed\u00ed,\u00a0\u00a0ne operativ\u011b.<\/div><\/li>
              3. Sn\u00ed\u017een\u00ed mno\u017estv\u00ed po\u017eadavk\u016f na helpdesk.<\/div><\/li>
              4. Zv\u00fd\u0161en\u00ed bezpe\u010dnosti citliv\u00fdch dat, zejm\u00e9na po odchodu \u010di p\u0159e\u0159azen\u00ed pracovn\u00edka<\/div><\/li><\/ol>

                \u00a0<\/h3>

                Jak\u00e9 \u00fa\u010dty IdM spravuje?<\/h3>

                IdM m\u016f\u017ee spravovat v\u0161echny \u00fa\u010dty, proto\u017ee pro ka\u017ed\u00fd typ \u00fa\u010dt\u016f lze nastavit r\u016fzn\u00e9 procesy. Jak\u00e9 \u00fa\u010dty m\u00e1 smysl spravovat? Integrace a automatizace i s n\u00e1strojem IdM stoj\u00ed n\u011bjak\u00e9 investice. Asi nem\u00e1 smysl automatizovat proces, kter\u00fd se aplikuje z\u0159\u00eddka na minimu \u00fa\u010dtu. Takov\u00fd proces m\u016f\u017ee asi levn\u011bji prov\u00e9st administr\u00e1tor.<\/p>

                Skupiny \u00fa\u010dt\u016f:<\/p>

                1. Zam\u011bstnanci<\/strong>\u00a0\u2013 obvykle identita vznik\u00e1 za\u010d\u00e1tkem smluvn\u00edho \u00favazku, kter\u00fd je na\u010dten do IdM z personalistiky.<\/li>
                2. Externisti<\/strong>\u00a0\u2013 z\u00e1kazn\u00edci, dodavatel\u00e9, studenti apod. P\u0159istupuj\u00ed do syst\u00e9m\u016f pomoc\u00ed VPN, \u010dasto vyu\u017e\u00edvaj\u00ed certifik\u00e1ty. Pro vznik identity se m\u016f\u017ee vyu\u017e\u00edvat webov\u00e9 rozhran\u00ed IdM.<\/li>
                3. Technick\u00e9 a servisn\u00ed \u00fa\u010dty<\/strong>\u00a0\u2013 nap\u0159\u00edklad administr\u00e1torsk\u00e9 \u00fa\u010dty nebo \u00fa\u010dty aplikac\u00ed. Tyto \u00fa\u010dty obvykle nesm\u00ed zaknitout i po odchodu vlastn\u00edka \u00fa\u010dtu. Nelze na n\u011b aplikovat b\u011b\u017en\u00e9 person\u00e1ln\u00ed procesy zam\u011bstnanc\u016f. Maj\u00ed vlastn\u00ed agendu proces\u016f. IdM m\u016f\u017ee \u0159e\u0161it i agendu p\u0159ed\u00e1v\u00e1n\u00ed hesla.<\/li><\/ol>

                  \u00a0<\/p>

                  Jak\u00e9 objekty IdM zpracov\u00e1v\u00e1?<\/strong><\/p>

                  • Identity, \u00fa\u010dty, role, skupiny, slo\u017eky, organiza\u010dn\u00ed strukturu, \u00favazky, certifik\u00e1ty, fotky, katalog rol\u00ed, SW licence, vpn p\u0159\u00edstupy\u2026<\/li><\/ul>

                    Jak\u00e9 procesy IdM zaji\u0161\u0165uje?<\/h3>

                    Jedn\u00edm z hlavn\u00edch p\u0159\u00ednos\u016f IdM je automatizace. K tomu slou\u017e\u00ed r\u016fzn\u00e9 typy proces\u016f na r\u016fzn\u00e9 typy identit.<\/p>

                    Typy proces\u016f:<\/p>

                    1. Automatizovan\u00e9 procesy zam\u011bstnanc\u016f:
                      • N\u00e1stup zam\u011bstnance a vznik identity, vznik pracovn\u00edho \u00favazku,<\/li>
                      • zm\u011bna organiza\u010dn\u00edho za\u0159azen\u00ed v r\u00e1mci \u00favazku<\/li>
                      • zm\u011bna popisn\u00fdch atribut\u016f (telefon, adresa apod.)<\/li>
                      • vyn\u011bt\u00ed z eviden\u010dn\u00edho po\u010dtu (mate\u0159sk\u00e1\/rodi\u010dovsk\u00e1)<\/li>
                      • Ukon\u010den\u00ed \u00favazku, z\u00e1nik identity.<\/li><\/ul><\/li>
                      • Ru\u010dn\u00ed z\u00e1sahy \u2013 \u017e\u00e1dosti o p\u0159\u00edstupy, vpn, certifik\u00e1t a schv\u00e1len\u00ed \u017e\u00e1dosti, manu\u00e1ln\u00ed zalo\u017een\u00ed \u00fa\u010dtu administr\u00e1torem apod.<\/li>
                      • Automatick\u00e9 synchronizace \u2013 \u00fa\u010dt\u016f, rol\u00ed, \u00favazk\u016f, organiza\u010dn\u00edho za\u0159azen\u00ed,<\/li>
                      • Reporting \u2013 reporty pro audity, m\u011bs\u00ed\u010dn\u00ed p\u0159ehledy atd. podklad pro recertifikaci p\u0159\u00edstup\u016f,<\/li><\/ol>

                        \u00a0<\/h3>

                        Co je \u0159\u00edzen\u00ed p\u0159\u00edstup\u016f rolemi (RBAC)?<\/h3>

                        IdM vyu\u017e\u00edv\u00e1 nastavov\u00e1n\u00ed pr\u00e1v na z\u00e1klad\u011b p\u0159i\u0159azen\u00ed role, RBAC \u2013 Role-Based Access Control. Jedn\u00e1 se o z\u00e1kladn\u00ed funk\u010dn\u00ed mechanismus IdM. Pokud\u00a0z\u00edsk\u00e1m roli, znamen\u00e1 to, \u017ee jsem typicky z\u00edskal p\u0159\u00edstup do syst\u00e9mu nebo n\u011bjak\u00e9 konkr\u00e9tn\u00ed opr\u00e1vn\u011bn\u00ed v syst\u00e9mu, jako nap\u0159\u00edklad za\u0159azen\u00ed do MS Active directory skupiny.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

                        \n\t\t\t\t\t
                        \n\t\t\t\t
                        \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                        \n\t\t\t\t\t
                        \n\t\t\t\t
                        \n\t\t\t\t\t\t\t\t\t

                        IdM spravuje n\u00e1sleduj\u00edc\u00ed typy rol\u00ed:<\/strong><\/p>

                        1. Role aplika\u010dn\u00ed \u2013 m\u00e1m roli, m\u00e1m p\u0159\u00edstup do aplikace nebo konkr\u00e9tn\u00ed pr\u00e1vo v aplikaci.<\/li>
                        2. P\u0159\u00edstupov\u00e9 role v IdM \u2013 m\u00e1m roli, m\u00e1m n\u011bjak\u00e9 vy\u0161\u0161\u00ed pravomoci pr\u00e1ce v Identity Manageru. Nap\u0159\u00edklad mohu schvalovat n\u011bkomu pr\u00e1va.<\/li>
                        3. Byznys role \u2013 seskupuj\u00ed v\u00fd\u0161e zm\u00edn\u011bn\u00e9. Nap\u0159\u00edklad role \u201csekret\u00e1\u0159ka\u201d m\u00e1 role pro Doch\u00e1zkov\u00fd syst\u00e9m a Helpdesk.<\/li>
                        4. Dle typu p\u0159i\u0159azen\u00ed:
                          • Automatick\u00e9 \u2013 nap\u0159\u00edklad na z\u00e1klad\u011b p\u0159\u00edslu\u0161nosti k organizaci, \u00favazku nebo na z\u00e1klad\u011b atributu u identity.<\/li>
                          • Ru\u010dn\u011b administr\u00e1torem nebo na z\u00e1klad\u011b \u017e\u00e1dosti a schv\u00e1len\u00ed pov\u011b\u0159enou osobou (nad\u0159\u00edzen\u00fd, byznys vlastn\u00edk role apod.).<\/li><\/ul><\/li><\/ol>

                            Zaj\u00edmav\u00e9 vlastnosti rol\u00ed:<\/strong><\/p>

                            • Garanti role \u2013 typicky schvaluje p\u0159id\u011blen\u00ed role, m\u016f\u017ee roli s\u00e1m p\u0159id\u011blit.<\/li>
                            • R\u016fzn\u00e1 schvalovac\u00ed workflow pro role \u2013 dle d\u016fle\u017eitosti\/kriti\u010dnosti.<\/li>
                            • \u010casov\u011b omezen\u00e9 p\u0159i\u0159azen\u00ed rol\u00ed \u2013 nap\u0159\u00edklad VPN pro externisty nebo po dobu pr\u00e1ce na projektu.<\/li>
                            • Separation of duties (SoD) \u2013 odd\u011blen\u00ed pravomoc\u00ed v \u0159\u00edzen\u00fdch aplikac\u00edch, mo\u017enost zav\u00e9st princip v\u00edce o\u010d\u00ed ve v\u00edcekolov\u00e9m schvalov\u00e1n\u00ed.<\/li>
                            • Slou\u010den\u00ed rol\u00ed do byznys rol\u00ed<\/li>
                            • Automaticky p\u0159id\u011blovan\u00e9 role dle organiza\u010dn\u00ed struktury nebo atributu (nap\u0159. v\u0161ichni l\u00e9ka\u0159i)<\/li>
                            • Synchronizace rol\u00ed z\u00a0extern\u00edho zdroje \u2013 \u010dasto MS AD skupiny nebo LDAP skupiny<\/li>
                            • Export rol\u00ed do spravovan\u00e9ho syst\u00e9mu<\/li>
                            • Katalogizace rol\u00ed \u2013 zjednodu\u0161uje v\u00fdb\u011br role u\u017eivateli v \u017e\u00e1dosti o roli<\/li>
                            • Report rol\u00ed \u2013 kdo m\u00e1 jakou roli a jak\u00fdm zp\u016fsobem ji z\u00edskal (automaticky, manu\u00e1ln\u011b)<\/li><\/ul>

                              Podpora spravovan\u00fdch syst\u00e9m\u016f?<\/strong><\/h3>

                              K IdM je mo\u017en\u00e9 p\u0159ipojit libovoln\u00fd syst\u00e9m, kter\u00fd je dostupn\u00fd po s\u00edti a je zn\u00e1ma (nebo zjistiteln\u00e1) struktura identit. V\u00fd\u0161e popsan\u00e9 m\u016f\u017ee vyvol\u00e1vat dojem, \u017ee p\u0159ipojen\u00ed koncov\u00fdch syst\u00e9m\u016f k syst\u00e9mu IdM mus\u00ed vy\u017eadovat jejich nemal\u00e9 uzp\u016fsoben\u00ed pro podporu identity managementu. Opak je pravdou.\u00a0Velk\u00fdm p\u0159\u00ednosem IdM je snadnost p\u0159ipojen\u00ed koncov\u00e9ho syst\u00e9mu bez nutnosti jeho p\u0159izp\u016fsoben\u00ed nebo dokonce i restartu.<\/strong>\u00a0A jak na to? Vyu\u017e\u00edvaj\u00ed se obecn\u011bj\u0161\u00ed p\u0159\u00edstupy mezi n\u011b\u017e pat\u0159\u00ed tak\u00e9 tzv. identity konektory.<\/p>

                              Konektor je mal\u00fd programov\u00fd n\u00e1stroj na stran\u011b IdM, kter\u00fd dovoluje v\u00fdm\u011bnu dat s napojen\u00fdm syst\u00e9mem pomoc\u00ed jeho nativn\u00edho API. T\u00edm p\u00e1dem se konektor p\u0159izp\u016fsobuje napojen\u00e9mu syst\u00e9mu, nikoli naopak.<\/p>

                              Konektory obecn\u011b poskytuj\u00ed metody pro:<\/h5>
                              • vytvo\u0159en\u00ed nov\u00e9ho u\u017eivatelsk\u00e9ho \u00fa\u010dtu, pop\u0159. skupiny, role, organizace atd.<\/li>
                              • editaci st\u00e1vaj\u00edc\u00edho u\u017eivatelsk\u00e9ho \u00fa\u010dtu<\/li>
                              • smaz\u00e1n\u00ed u\u017eivatelsk\u00e9ho \u00fa\u010dtu<\/li>
                              • \u010dten\u00ed u\u017eivatelsk\u00e9ho \u00fa\u010dtu<\/li>
                              • vylistov\u00e1n\u00ed v\u0161ech \u00fa\u010dt\u016f<\/li>
                              • vyhled\u00e1n\u00ed \u00fa\u010dt\u016f dle vybran\u00e9ho filtru (nap\u0159\u00edklad pouze toho, kter\u00fd se od posledn\u00edho hled\u00e1n\u00ed zm\u011bnil)<\/li><\/ul>
                                Seznam konektor\u016f?<\/h5>

                                Ptejte se sv\u00e9ho dodavatele. Obvykle je seznam podporovan\u00fdch syst\u00e9m\u016f velmi rozs\u00e1hl\u00fd. Pokud nem\u00e1te n\u011bjak\u00fd lok\u00e1ln\u00ed syst\u00e9m, tak bude podporov\u00e1n.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

                                \n\t\t\t\t\t
                                \n\t\t\t\t
                                \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                                \n\t\t\t\t\t
                                \n\t\t\t\t
                                \n\t\t\t\t\t\t\t\t\t

                                Na co si d\u00e1t u nab\u00edzen\u00e9ho konektoru pozor?<\/strong><\/p>

                                1. Zda konektor podporuje va\u0161\u00ed verzi spravovan\u00e9ho syst\u00e9mu.<\/li>
                                2. Jak\u00e9 funkce\/operace konektor podporuje. Nap\u0159\u00edklad zda podporuje blokaci \u00fa\u010dtu, zm\u011bnu hesla nebo zm\u011bnov\u00e9 synchronizace.<\/li>
                                3. Jak\u00e9 objekty v koncov\u00e9m syst\u00e9mu podporuje. Nap\u0159\u00edklad konektory pro Active Directory \u010dasto nepodporuj\u00ed spr\u00e1vu skupin.<\/li>
                                4. Licen\u010dn\u00ed omezen\u00ed, proto\u017ee cena konektoru nemus\u00ed b\u00fdt n\u00edzk\u00e1\u2026<\/li><\/ol>
                                  \u00a0<\/h5>

                                  Virtu\u00e1ln\u00ed neboli nep\u0159\u00edmo spravovan\u00e9 syst\u00e9my<\/strong><\/p>

                                  Modern\u011bj\u0161\u00ed Identity Managery nab\u00edzej\u00ed takzvan\u00e9 virtu\u00e1ln\u00ed<\/em>\u00a0p\u0159ipojen\u00ed.\u00a0Virtu\u00e1ln\u00ed syst\u00e9m je takov\u00fd syst\u00e9m, na n\u011bm\u017e IdM p\u0159\u00edmo nespravuje u\u017eivatelsk\u00e9 \u00fa\u010dty. M\u00edsto toho se odes\u00edl\u00e1 emailov\u00e1 notifikace administr\u00e1tor\u016fm dan\u00e9ho syst\u00e9mu, aby po\u017eadovanou akci (zalo\u017een\u00ed \u00fa\u010dtu u\u017eivatele, modifikaci atribut\u016f \u00fa\u010dtu, smaz\u00e1n\u00ed \u00fa\u010dtu u\u017eivatele) provedli ru\u010dn\u011b a potvrdili spln\u011bn\u00ed v IdM.<\/p>

                                  Z\u00edsk\u00e1te centr\u00e1ln\u00ed podporu \u017eivotn\u00edho cyklu identit a centr\u00e1ln\u00edho \u0159\u00edzen\u00ed rol\u00ed pro velk\u00e9 mno\u017estv\u00ed syst\u00e9m\u016f levn\u011b a rychle.<\/p>

                                  Virtu\u00e1ln\u00ed syst\u00e9my nach\u00e1zej\u00ed uplatn\u011bn\u00ed nap\u0159\u00edklad tam, kde:<\/p>

                                  • dan\u00fd syst\u00e9m nen\u00ed mo\u017en\u00e9 z technick\u00fdch d\u016fvod\u016f napojit p\u0159\u00edmo,<\/li>
                                  • p\u0159\u00edm\u00e9 napojen\u00ed dan\u00e9ho syst\u00e9mu nen\u00ed ekonomicky v\u00fdhodn\u00e9, nap\u0159\u00edklad jsou v syst\u00e9mu pouze jednotky \u00fa\u010dt\u016f,<\/li>
                                  • nebo je \u017e\u00e1douc\u00ed syst\u00e9m nejd\u0159\u00edve napojit jako virtu\u00e1ln\u00ed a ov\u011b\u0159it t\u00edm spr\u00e1vnou funkcionalitu napojen\u00ed.<\/li><\/ul>

                                    U\u017eivatelsk\u00e9 rozhran\u00ed mus\u00ed b\u00fdt pro adminy srozumiteln\u00e9.<\/p>

                                    Co nen\u00ed IdM?<\/h3>

                                    Centralizace \u00fa\u010dt\u016f v Active Directory (AD) nen\u00ed Identity Management z definice tohoto \u010dl\u00e1nku, proto\u017ee\u00a0AD nenab\u00edz\u00ed<\/strong>:<\/p>

                                    1. Rozhran\u00ed na \u017e\u00e1dosti<\/strong>\u00a0a schvalov\u00e1n\u00ed \u00a0o p\u0159\u00edstupy,<\/li>
                                    2. Auditov\u00e1n\u00ed kdo co schv\u00e1lil<\/strong>\u00a0a pro\u010d m\u00e1 \u00fa\u010det dan\u00e1 pr\u00e1va,<\/li>
                                    3. Delegaci \u00fakon\u016f na byznys vlastn\u00edky<\/strong>.<\/li>
                                    4. Mo\u017enost integrace s API jin\u00fdch syst\u00e9m\u016f<\/strong>\u00a0\u2013 pro integraci syst\u00e9mu s Active Directory mus\u00ed b\u00fdt aplikace p\u0159ipravena nebo upravena. Takov\u00e1 \u00faprava je mo\u017en\u00e1, ale b\u00fdv\u00e1 pracn\u00e1 a drah\u00e1.<\/li><\/ol>

                                      Z definice v\u00fd\u0161e d\u00e1le nelze pou\u017e\u00edt jako IdM:<\/p>

                                      1. access manager \u2013 Ten typicky \u0159e\u0161\u00ed centr\u00e1ln\u00ed autentizaci a autorizaci u\u017eivatel\u016f nap\u0159\u00ed\u010d syst\u00e9my, nikoli proces p\u0159id\u011blen\u00ed pr\u00e1v.<\/li>
                                      2. Intrusion and detection SW a\u00a0Monitorovac\u00ed n\u00e1stroje \u2013 \u0159e\u0161\u00ed online \u010di pravideln\u00fd reporting aktu\u00e1ln\u00edho stavu syst\u00e9mu, ne\u0159e\u0161\u00ed samotn\u00fd management pr\u00e1v pro syst\u00e9m.<\/li><\/ol>

                                        \u00a0<\/h3>

                                        Z\u00e1v\u011br?<\/strong><\/h3>

                                        Identity Manager m\u016f\u017ee b\u00fdt v\u00fdborn\u00fdm pomocn\u00edkem, kter\u00fd ud\u011bl\u00e1 po\u0159\u00e1dek v identit\u00e1ch \u2013 centralizovat, automatizovat a zabezpe\u010dit spr\u00e1vu \u00fa\u010dt\u016f a jejich pr\u00e1v v \u00a0IT syst\u00e9mech. Identity Manager m\u016f\u017ee b\u00fdt finan\u010dn\u011b n\u00e1vratn\u00fd i ve st\u0159edn\u00edch firm\u00e1ch, kter\u00e9 se potk\u00e1vaj\u00ed s n\u00e1ro\u010dnost\u00ed spr\u00e1vy identit. Modern\u00ed Identity Managery svou jednoduchost\u00ed a mno\u017estv\u00edm funkc\u00ed umo\u017e\u0148uj\u00ed rychl\u00e9 nasazen\u00ed do produk\u010dn\u00edho provozu a postupn\u00e9 budov\u00e1n\u00ed centr\u00e1ln\u00edho bezpe\u010dnostn\u00edho prvku firemn\u00ed IT infrastruktury.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                                        Identity Management (IdM) je centralizovan\u00e1 spr\u00e1va identit v IT syst\u00e9mech. Umo\u017e\u0148uje spr\u00e1vn\u00fdm osob\u00e1m p\u0159\u00edstup ke spr\u00e1vn\u00fdm zdroj\u016fm, ve spr\u00e1vn\u00fd \u010das, ze spr\u00e1vn\u00fdch d\u016fvod\u016f a s plnou evidenc\u00ed. IT syst\u00e9my jsou typicky heterogenn\u00ed a jsou dostupn\u00e9 po intern\u00ed s\u00edti. Spr\u00e1va je prov\u00e1d\u011bna z\u00e1sahem administr\u00e1tora v IdM nebo automatizovan\u00fdmi procesy.<\/p>\n","protected":false},"author":6,"featured_media":6393,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32],"tags":[],"class_list":["post-6611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/6611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=6611"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/6611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/6393"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=6611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=6611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=6611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}