{"id":8592,"date":"2023-11-09T14:54:31","date_gmt":"2023-11-09T13:54:31","guid":{"rendered":"https:\/\/www.idstory.com\/?p=8592"},"modified":"2023-11-09T15:05:57","modified_gmt":"2023-11-09T14:05:57","slug":"jak-zabranit-vendor-lock-in-u-identity-managementu","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/jak-zabranit-vendor-lock-in-u-identity-managementu\/","title":{"rendered":"Jak zabr\u00e1nit vendor lock-in u Identity Managementu?"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\u0158e\u0161en\u00ed Identity Managementu (d\u00e1le jen IdM) b\u00fdvaj\u00ed integrovan\u00e1 s mnoha spravovan\u00fdmi syst\u00e9my. P\u0159\u00edpadn\u00fd p\u0159echod na jin\u00e9ho servisn\u00edho dodavatele mu\u017ee b\u00fdt velmi n\u00e1ro\u010dn\u00fd. Proto je vhodn\u00e9 p\u0159em\u00fd\u0161let nad nez\u00e1vislost\u00ed na dodavateli ji\u017e p\u0159i koupi a n\u00e1sledn\u011b p\u0159i cel\u00e9m \u017eivotn\u00edm cyklu \u0159e\u0161en\u00ed. Jak zabr\u00e1nit vendor lock-in u Identity Managementu?\r\n\r\nNa z\u00e1klad\u011b mnohalet\u00fdch zku\u0161enost\u00ed s\u00a0implementacemi a n\u011bkolika migracemi IdM doporu\u010dujeme n\u00e1sleduj\u00edc\u00ed.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Co si pohl\u00eddat?<\/h2>

1) M\u011bjte IDM admina, vlastn\u00edka syst\u00e9mu<\/h4>

Pokud chcete m\u00edt \u00fasp\u011b\u0161n\u00fd projekt Identity Managementu, ur\u010dete z\u00e1stupce, kter\u00fd bude IdM \u0159e\u0161en\u00ed v organizaci vlastnit. Pro zjednodu\u0161en\u00ed nazv\u011bme takov\u00e9ho z\u00e1stupce adminem IdM. Nen\u00ed to \u010dlov\u011bk, kter\u00fd mus\u00ed um\u011bt programovat. Nemus\u00ed rozv\u00edjet nebo spravovat syst\u00e9m. Je to z\u00e1stupce investora, kter\u00fd rozum\u00ed funkc\u00edm \u0159e\u0161en\u00ed (ne nutn\u011b produktu) a v\u00ed, jak funguj\u00ed intern\u00ed procesy organizace. Admin zn\u00e1, jak\u00e9 syst\u00e9my jsou integrovan\u00e9, do jak\u00e9 \u00farovn\u011b a pro\u010d. Je schopen zhodnotit, zadat a obh\u00e1jit dal\u0161\u00ed rozvoje. Nebo po\u017eadavky naopak dok\u00e1\u017ee odm\u00edtnout pro n\u00edzkou ekonomickou n\u00e1vratnost.<\/p>

Admin pom\u016f\u017ee s p\u0159echodem na nov\u00e9ho servisn\u00edho partnera Identity Manageru, proto\u017ee v\u00ed, jak m\u00e1 syst\u00e9m fungovat z pohledu firmy. Pokud takov\u00e9ho z\u00e1stupce nem\u00e1te, doporu\u010duji ho co nejd\u0159\u00edve delegovat.<\/p>

2) Vyberte spr\u00e1vn\u00e9ho dodavatele a produkt<\/h4>

Nesoust\u0159e\u010fte se na produkt. D\u00edvejte se na implementa\u010dn\u00ed t\u00fdm. Pobavte se s jeho \u010dleny. Nechte si uk\u00e1zat reference, demo. Zavolejte referen\u010dn\u00edm z\u00e1kazn\u00edk\u016fm. Nechte si navrhnout \u0159e\u0161en\u00ed na va\u0161e pot\u0159eby. Dle toho nejl\u00e9pe pozn\u00e1te, zda m\u00e1te spr\u00e1vn\u00e9ho dodavatele. Ano, stoj\u00ed to \u010das, kter\u00fd se v\u00e1m ov\u0161em n\u00e1sobn\u011b vr\u00e1t\u00ed.<\/p>

Nenechte ovlivnit velkou zna\u010dkou nebo Gartner diagramem.\u00a0Setk\u00e1v\u00e1me se s t\u00edm, \u017ee velk\u00e9 IT korporace maj\u00ed zastaral\u00fd produkt. Ji\u017e n\u011bkolikr\u00e1t jsme migrovali z\u00e1kazn\u00edka z \u201cnej dle produktu Gartnera\u201d, proto\u017ee klient byl naprosto ne\u0161\u0165astn\u00fd z implementace i funkc\u00ed.<\/p>

Pot\u0159ebujete mezin\u00e1rodn\u00ed produkt nebo ten kter\u00fd je p\u0159izp\u016fsoben\u00fd na \u010deskou legislativu a aplikace?<\/p>

Dost\u00e1v\u00e1me dotaz: A\u00a0jakou m\u00e1me garanci, \u017ee neskon\u010d\u00edte?<\/em>\u00a0Na to odpov\u00edd\u00e1me:\u00a0A jakou m\u00e1te jistotu u velk\u00e9ho dodavatele?\u00a0<\/em>Naopak velk\u00e1 IT firma produkt za\u0159\u00edzne, bez l\u00edtosti. U IdM jsme se s t\u00edm v minulosti potkali n\u011bkolikr\u00e1t, nap\u0159\u00edklad u Microsoftu nebo Oracle. Garanc\u00ed m\u016f\u017ee b\u00fdt existence v\u00edce implementa\u010dn\u00edch partner\u016f, kte\u0159\u00ed \u0159e\u0161en\u00ed mohou p\u0159evz\u00edt.<\/p>

3) Smluvn\u00ed n\u00e1le\u017eitosti \u2013 \u0159e\u0161en\u00ed mus\u00ed b\u00fdt va\u0161e<\/h4>

Ji\u017e p\u0159i n\u00e1kupu rozva\u017ete, zda chcete pron\u00e1jem \u0159e\u0161en\u00ed, nebo n\u00e1kup. U IdM se v \u010cR potk\u00e1v\u00e1me pouze s n\u00e1kupem. U n\u00e1kupu si pohl\u00eddejte, \u017ee ve\u0161ker\u00e9 dodan\u00e9 produkty \u2013 k\u00f3d, dokumentace, postupy, n\u00e1vody, konektory, apod. \u2013 budou ve va\u0161em vlastnictv\u00ed.<\/p>

4) Dokumentace, dokumentace, dokumentace<\/h4>

Kvalitn\u00ed dokumentace je drah\u00e1 v\u011bc. Nesta\u010d\u00ed jen produktov\u00e9 listy a n\u00e1vody how-to, postupy v GUI. Je t\u0159eba m\u00edt pops\u00e1no, jak funguj\u00ed procesy spr\u00e1vy u\u017eivatel\u016f va\u0161eho \u0159e\u0161en\u00ed. Jak jsou syst\u00e9my integrov\u00e1ny, jak\u00e1 data se p\u0159ed\u00e1vaj\u00ed, jak jsou transformov\u00e1na, kam jsou p\u0159ed\u00e1v\u00e1na. IdM \u0159e\u0161en\u00ed b\u00fdv\u00e1 obvykle dost integrov\u00e1no a p\u0159izp\u016fsobeno. Dokumentace mus\u00ed b\u00fdt pro administr\u00e1tora, m\u011bla by b\u00fdt i pro v\u00fdvoj\u00e1\u0159e.\u00a0Hlavn\u00edm rysem v\u00fdvoj\u00e1\u0159sk\u00e9 dokumentace nen\u00ed pouze \u201cjak\u201d je to implementov\u00e1no, ale \u201cjak a pro\u010d\u201d je implementov\u00e1no.<\/p>

Jak pozn\u00e1te, \u017ee je dokumentace kvalitn\u00ed? Zapojte se (va\u0161eho admina) do testovac\u00edho procesu nasazov\u00e1n\u00ed nov\u00fdch verz\u00ed. P\u0159eb\u00edrejte nov\u00e9 funkce i s dokumentac\u00ed. Co se t\u00fd\u010de kvality dokumentace, plat\u00ed jednoduch\u00e9 pravidlo. Pokud dokumentaci nerozum\u00edte, je n\u011bco \u0161patn\u011b.<\/p>

5) Kompletn\u00ed zdrojov\u00e9 k\u00f3dy<\/h4>

Tento bod je doporu\u010den\u00edm, nen\u00ed nutnost\u00ed. M\u00edt dostupn\u00e9 zdrojov\u00e9 k\u00f3dy je pro nez\u00e1vislost v\u00fdhodou. Dnes je n\u011bkolik dodavatel\u016f poskytuj\u00edc\u00edch zdrojov\u00e9 k\u00f3dy IdM. Je t\u0159eba m\u00edt funk\u010dn\u00ed, kompletn\u00ed a kvalitn\u011b zdokumentovan\u00e9 zdrojov\u00e9 k\u00f3dy cel\u00e9ho \u0159e\u0161en\u00ed va\u0161\u00ed verze. Nesta\u010d\u00ed m\u00edt zdrojov\u00e9 k\u00f3dy po dod\u00e1vce n\u011bkde v sejfu. Syst\u00e9m se upravuje, lad\u00ed, rozv\u00edj\u00ed. S t\u00edm se m\u011bn\u00ed i zdrojov\u00e9 k\u00f3dy. Osv\u011bd\u010duje se n\u00e1m pou\u017e\u00edvat verzovac\u00ed syst\u00e9m\u00a0GIT. Po\u017e\u00e1dejte sv\u00e9ho dodavatele o p\u0159\u00edstup do GITu.<\/p>

Aby zdrojov\u00e9 k\u00f3dy byly v\u00fdhodou, mus\u00edte s nimi pracovat dlouhodob\u011b, ide\u00e1ln\u011b ji\u017e p\u0159i stav\u011bn\u00ed \u0159e\u0161en\u00ed. Vybudujte t\u00fdm, kter\u00fd zapojte do budov\u00e1n\u00ed \u0159e\u0161en\u00ed. Postupn\u011b technologie i procesy IdM nas\u00e1vejte a t\u00fdm \u0161kolte na re\u00e1ln\u00e9 pr\u00e1ci. Jednor\u00e1zov\u00e9 p\u0159evzet\u00ed nov\u00fdm t\u00fdmem je velmi n\u00e1ro\u010dn\u00fdm \u00fakolem.<\/p>

\u00a06) Perfektn\u011b zdokumentovan\u00e9 API, vyu\u017e\u00edvejte otev\u0159en\u00e9 technologie<\/h4>

Modern\u00ed SW b\u00fdv\u00e1 v\u00edcevrstv\u00fd \u2013 datab\u00e1ze, aplika\u010dn\u00ed server, webov\u00fd klientsk\u00fd port\u00e1l. Backend s frontendem komunikuje jasn\u011b definovan\u00fdm rozhran\u00edm, obvykle n\u011bjakou webovou slu\u017ebou. Identity Manager pou\u017e\u00edv\u00e1 r\u016fzn\u00e1 rozhran\u00ed ke komunikaci se spravovan\u00fdmi syst\u00e9my.<\/p>

\u0160patn\u011b definovan\u00e1 rozhran\u00ed jsou obvykle to, co prodlu\u017euje a prodra\u017euje p\u0159\u00edpadnou v\u00fdm\u011bnu identity manageru. N\u011bkdo mus\u00ed j\u00edt, API znovu analyzovat, a pak podle n\u011bj lze teprve vytvo\u0159it implementaci pro nov\u00e9 IdM. Samotn\u00fd identity manager lze pova\u017eovat z hlediska instalace za krabicov\u00fd produkt. Jeho napojen\u00ed k ostatn\u00edm syst\u00e9m\u016fm firmy z n\u011bj teprve d\u011bl\u00e1 u\u017eite\u010dnou v\u011bc. Nepodce\u0148ujte proto dokumentaci syst\u00e9mov\u00fdch rozhran\u00ed.<\/p>

Dokumentace se dnes d\u00e1 i dynamicky generovat. Nap\u0159\u00edklad takto\u00a0\u00a0CzechIdM SWAGGER<\/a> v na\u0161em IdStory.<\/p>

Pro komunikaci IDM s aplikacemi lze vyu\u017e\u00edt i standard SCIM. System for Cross-domain Identity Management (SCIM) specifikace byla navr\u017eena pro jednoduchou spr\u00e1vu u\u017eivatelsk\u00fdch identit v cloudov\u00e9m prost\u0159ed\u00ed. Stav\u00ed na principu RESTful API.<\/p>

Z\u00e1v\u011br?<\/h2>

M\u016f\u017ee se st\u00e1t, \u017ee se p\u0159echodu na jin\u00fd SW Identity Manager p\u0159esto nevyhnete.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

\u0158e\u0161en\u00ed Identity Managementu (d\u00e1le jen IdM) b\u00fdvaj\u00ed integrovan\u00e1 s mnoha spravovan\u00fdmi syst\u00e9my. P\u0159\u00edpadn\u00fd p\u0159echod na jin\u00e9ho servisn\u00edho dodavatele mu\u017ee b\u00fdt velmi n\u00e1ro\u010dn\u00fd. Proto je vhodn\u00e9 p\u0159em\u00fd\u0161let nad nez\u00e1vislost\u00ed na dodavateli ji\u017e p\u0159i koupi a n\u00e1sledn\u011b p\u0159i cel\u00e9m \u017eivotn\u00edm cyklu \u0159e\u0161en\u00ed. Jak zabr\u00e1nit vendor lock-in u Identity Managementu? Na z\u00e1klad\u011b mnohalet\u00fdch zku\u0161enost\u00ed s implementacemi a n\u011bkolika migracemi IdM doporu\u010dujeme n\u00e1sleduj\u00edc\u00ed.<\/p>\n","protected":false},"author":6,"featured_media":8598,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32],"tags":[],"class_list":["post-8592","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/8592","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=8592"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/8592\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/8598"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=8592"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=8592"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=8592"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}