{"id":8408,"date":"2023-09-21T13:30:38","date_gmt":"2023-09-21T11:30:38","guid":{"rendered":"https:\/\/www.idstory.com\/?p=8408"},"modified":"2023-09-21T10:41:18","modified_gmt":"2023-09-21T08:41:18","slug":"identity-a-access-management-iam-proc-je-dulezity","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/identity-a-access-management-iam-proc-je-dulezity\/","title":{"rendered":"Identity a Access Management (IAM) \u2013 pro\u010d je d\u016fle\u017eit\u00fd?"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\tIdentity a Access Management (IAM) je centralizovan\u00e1 spr\u00e1va a \u0159\u00edzen\u00ed identit a jejich p\u0159\u00edstup\u016f. Z\u00e1kladn\u00edm c\u00edlem syst\u00e9m\u016f IAM je maxim\u00e1ln\u00ed zjednodu\u0161en\u00ed a bezpe\u010dn\u00fd p\u0159\u00edstup jednotlivce (identity) do r\u016fznorod\u00fdch IT syst\u00e9m\u016f. Jakmile je tato digit\u00e1ln\u00ed identita vytvo\u0159ena, mus\u00ed b\u00fdt efektivn\u011b \u0159\u00edzena = udr\u017eov\u00e1na a sledov\u00e1na pro ka\u017ed\u00e9ho u\u017eivatele.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

IAM je o definov\u00e1n\u00ed a spr\u00e1v\u011b rol\u00ed a p\u0159\u00edstupov\u00fdch opr\u00e1vn\u011bn\u00ed jednotliv\u00fdch u\u017eivatel\u016f IT syst\u00e9m\u016f. T\u011bmito u\u017eivateli mohou b\u00fdt z\u00e1kazn\u00edci, zam\u011bstnanci, dodavatel\u00e9, studenti atd. IT syst\u00e9my jsou typicky heterogenn\u00ed a jsou dostupn\u00e9 po vnit\u0159n\u00ed s\u00edti, n\u011bkdy jsou v\u0161ak tak\u00e9 ur\u010dit\u00e9 segmenty vystaveny do Internetu. T\u00edm sp\u00ed\u0161 je pot\u0159eba pe\u010dliv\u011b db\u00e1t na \u0159\u00edzen\u00ed p\u0159\u00edstup\u016f \u2013 Identity a Access Management.<\/p>

Identity a Access Management \u2013 n\u00e1stroje<\/h2>

Identity a Access Management se skl\u00e1d\u00e1 z Identity Managementu (IdM) a Access\u00a0\"Identity<\/a>Managementu (AM).<\/p>

Identity Management (IdM)<\/b>\u00a0 je centralizovan\u00e1 spr\u00e1va identit v IT syst\u00e9mech, kterou zaji\u0161\u0165uje SW Identity Manager. Jedn\u00e1 se o procesn\u00ed n\u00e1stroj, kter\u00fd m\u00e1 komunika\u010dn\u00ed rozhran\u00ed do mnoha spravovan\u00fdch syst\u00e9m\u016f. Identity Manager integruje spravovan\u00e9 syst\u00e9my a umo\u017e\u0148uje nad nimi prov\u00e1d\u011bt procesy spr\u00e1vu \u00fa\u010dt\u016f v koncov\u00fdch syst\u00e9mech. Sou\u010d\u00e1st\u00ed IdM jsou synchroniza\u010dn\u00ed n\u00e1stroje pro p\u0159enos dat, auditn\u00ed a reportovac\u00ed funkce a samoz\u0159ejm\u011b u\u017eivatelsk\u00e9 rozhran\u00ed, kter\u00e9 umo\u017e\u0148uje p\u0159en\u00e9st odpov\u011bdnost za ur\u010dit\u00e9 \u00fakoly na u\u017eivatele.<\/p>

Access Management (AM)<\/b>\u00a0jsou procesy, postupy a technologie (SW = Access Manager) pou\u017e\u00edvan\u00e9 k \u0159\u00edzen\u00ed a monitorov\u00e1n\u00ed p\u0159\u00edstupu k IT syst\u00e9m\u016fm. Funkce spr\u00e1vy p\u0159\u00edstupu, jako je autentizace, autorizace, audit d\u016fv\u011bryhodnosti a zabezpe\u010den\u00ed, jsou ned\u00edlnou sou\u010d\u00e1st\u00ed \u0161pi\u010dkov\u00fdch syst\u00e9m\u016f spr\u00e1vy p\u0159\u00edstup\u016f pro m\u00edstn\u00ed i cloudov\u00e9 syst\u00e9my.\u00a0\u00a0<\/p>

Pro\u010d je d\u016fle\u017eit\u00fd\u00a0Identity a Access Management?<\/h2>

Spr\u00e1va identit a p\u0159\u00edstup\u016f IAM je neodd\u011bliteln\u011b spjata s bezpe\u010dnost\u00ed IT a produktivitou organizac\u00ed v dne\u0161n\u00ed dob\u011b digitalizace.<\/p>

\"Driving<\/a><\/p>

Kompromitovan\u00e1 digit\u00e1ln\u00ed identita \u010dasto slou\u017e\u00ed jako vstupn\u00ed bod do s\u00edt\u011b organizace. Organizace, kter\u00e9 pou\u017e\u00edvaj\u00ed IAM k zabezpe\u010den\u00ed sv\u00fdch informa\u010dn\u00edch aktiv l\u00e9pe \u010del\u00ed rostouc\u00edm hrozb\u00e1m v podob\u011b ransomwaru, hackingu, phishingu a dal\u0161\u00edch \u00fatok\u016f malwaru.\u00a0<\/p>

V mnoha organizac\u00edch maj\u00ed u\u017eivatel\u00e9 v\u00edce p\u0159\u00edstupov\u00fdch opr\u00e1vn\u011bn\u00ed, ne\u017e je nutn\u00e9. D\u00edky vy\u0161\u0161\u00edm pr\u00e1v\u016fm se u\u017eivatel m\u016f\u017ee dostat k dat\u016fm ke kter\u00fdm nem\u00e1 m\u00edt p\u0159\u00edstup (nap\u0159. mzdy). Syst\u00e9m IAM m\u016f\u017ee p\u0159idat d\u016fle\u017eitou vrstvu ochrany zaji\u0161t\u011bn\u00edm konzistentn\u00edho uplat\u0148ov\u00e1n\u00ed pravidel a z\u00e1sad p\u0159\u00edstupu u\u017eivatel\u016f v cel\u00e9 organizaci.<\/p>

Centr\u00e1ln\u00ed spr\u00e1vy syst\u00e9m\u016f mohou sn\u00ed\u017eit slo\u017eitost a n\u00e1klady na zabezpe\u010den\u00ed prov\u011b\u0159en\u00ed u\u017eivatele a jeho p\u0159\u00edstupu. Syst\u00e9my IAM z\u00e1rove\u0148 umo\u017e\u0148uj\u00ed u\u017eivatel\u016fm zv\u00fd\u0161it produktivitu (p\u0159i zachov\u00e1n\u00ed bezpe\u010dnosti) v r\u016fzn\u00fdch prost\u0159ed\u00edch, a\u0165 u\u017e pracuj\u00ed z domova, z kancel\u00e1\u0159e nebo na cest\u00e1ch. Sta\u010d\u00ed si spo\u010d\u00edtat kolik organizaci stoj\u00ed manu\u00e1ln\u00ed zalo\u017een\u00ed a udr\u017eov\u00e1n\u00ed jednoho \u00fa\u010dtu a dojdeme ke statis\u00edc\u016fm ro\u010dn\u011b. Pokud se do n\u00e1klad\u016f zapo\u010d\u00edt\u00e1 riziko odcizen\u00ed dat, tak dojdeme k tomu, \u017ee oblast spr\u00e1vy u\u017eivatelsk\u00fdch \u00fa\u010dt\u016f je pom\u011brn\u011b n\u00e1kladn\u00e1.<\/p>

P\u0159\u00ednosy IAM<\/h2>

Implementace IAM firm\u011b m\u016f\u017ee zajistit v\u00fdznamnou konkuren\u010dn\u00ed v\u00fdhodu. V dne\u0161n\u00ed dob\u011b pot\u0159ebuje v\u011bt\u0161ina organizac\u00ed poskytnout u\u017eivatel\u016fm p\u0159\u00edstup k intern\u00edm syst\u00e9m\u016fm z vn\u011bj\u0161\u00ed s\u00edt\u011b. IAM organizaci umo\u017e\u0148uje roz\u0161\u00ed\u0159it p\u0159\u00edstup k jej\u00edm informa\u010dn\u00edm syst\u00e9m\u016fm nap\u0159\u00ed\u010d on-premise aplikacemi, mobiln\u00edmi aplikacemi a SaaS, ani\u017e by to ohrozilo zabezpe\u010den\u00ed. Poskytnut\u00edm p\u0159\u00edstupu z vn\u011bj\u0161\u00ed s\u00edt\u011b je mo\u017en\u00e9 zv\u00fd\u0161it produktivitu, spokojenost zam\u011bstnanc\u016f, v\u00fdzkum a v\u00fdvoj a v kone\u010dn\u00e9m d\u016fsledku i p\u0159\u00edjmy.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Identity Management m\u016f\u017ee nap\u0159\u00edklad sn\u00ed\u017eit po\u010det hovor\u016f na t\u00fdmy\u00a0 IT podpory ohledn\u011b resetov\u00e1n\u00ed hesla. Umo\u017e\u0148uje spr\u00e1vc\u016fm automatizovat tyto a dal\u0161\u00ed \u010dasov\u011b n\u00e1ro\u010dn\u00e9 a n\u00e1kladn\u00e9 \u00fakoly.<\/p>

IAM je z\u00e1kladn\u00edm kamenem zabezpe\u010den\u00e9 s\u00edt\u011b, proto\u017ee spr\u00e1va digit\u00e1ln\u00ed identity u\u017eivatele je podstatnou sou\u010d\u00e1st\u00ed \u0159\u00edzen\u00ed p\u0159\u00edstup\u016f. Nasazen\u00ed IAM po organizac\u00edch vy\u017eaduje, aby co nejp\u0159esn\u011bji byly definov\u00e1ny z\u00e1sady p\u0159\u00edstupu \u2013 kdo m\u00e1 p\u0159\u00edstup, ke kter\u00fdm datov\u00fdm zdroj\u016fm a za jak\u00fdch podm\u00ednek.<\/p>

IAM p\u0159\u00ednosy v bodech<\/strong><\/h3>
  1. Automatizuje rutinn\u00ed procesy spr\u00e1vy identit. Ulevuje administr\u00e1tor\u016fm od rutinn\u00edch proces\u016f.<\/li>
  2. Centralizuje syst\u00e9my pod jedinou spr\u00e1vu \u2013 z\u00edsk\u00e1te p\u0159ehled o p\u0159\u00edstupech v\u00a0 syst\u00e9mech, identifikuje osobu nap\u0159\u00ed\u010d syst\u00e9my.<\/li>
  3. Delegujte spr\u00e1vu \u00fa\u010dt\u016f na business vlastn\u00edky. Tj. nap\u0159\u00edklad nad\u0159\u00edzen\u00ed \u017e\u00e1daj\u00ed a schvaluj\u00ed p\u0159\u00edstupy do CRM. Administr\u00e1to\u0159i se maj\u00ed v\u011bnovat rozvoji syst\u00e9m\u016f, ne schvalov\u00e1n\u00ed, zda tam m\u00e1 m\u00edt \u017eadatel dan\u00fd p\u0159\u00edstup.<\/li>
  4. Eviduje, audituje operace nad \u00fa\u010dty a pr\u00e1vy. Rychl\u00e9 snadn\u00e9 z\u00edsk\u00e1v\u00e1n\u00ed\u00a0 podklad\u016f pro audity IT.<\/li>
  5. Zv\u00fd\u0161\u00ed bezpe\u010dnost nap\u0159\u00edklad zamezen\u00edm existence mrtv\u00fdch du\u0161\u00ed. Ji\u017e se nestane, \u017ee pracovn\u00edk po ukon\u010den\u00ed smlouvy m\u00e1 st\u00e1le p\u0159\u00edstupy do syst\u00e9mu a m\u016f\u017ee si odn\u00e9st data.<\/li>
  6. Zaji\u0161\u0165uje ov\u011b\u0159ov\u00e1n\u00ed a p\u0159id\u011blov\u00e1n\u00ed pr\u00e1v p\u0159\u00edstup\u016f k aplikac\u00edm. U\u017eivateli se zredukeje po\u010det hesel, kter\u00e9 si mus\u00ed pamatovat a d\u00edky tomu je v pr\u00e1ci produktivn\u011bj\u0161\u00ed.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

    Identity a Access Management (IAM) je centralizovan\u00e1 spr\u00e1va a \u0159\u00edzen\u00ed identit a jejich p\u0159\u00edstup\u016f. Z\u00e1kladn\u00edm c\u00edlem syst\u00e9m\u016f IAM je maxim\u00e1ln\u00ed zjednodu\u0161en\u00ed a bezpe\u010dn\u00fd p\u0159\u00edstup jednotlivce (identity) do r\u016fznorod\u00fdch IT syst\u00e9m\u016f. Jakmile je tato digit\u00e1ln\u00ed identita vytvo\u0159ena, mus\u00ed b\u00fdt efektivn\u011b \u0159\u00edzena = udr\u017eov\u00e1na a sledov\u00e1na pro ka\u017ed\u00e9ho u\u017eivatele. <\/p>\n","protected":false},"author":6,"featured_media":8409,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[29,32],"tags":[],"class_list":["post-8408","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-access-manager","category-identity-manager"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/8408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=8408"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/8408\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/8409"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=8408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=8408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=8408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}