{"id":9063,"date":"2024-05-21T12:45:04","date_gmt":"2024-05-21T10:45:04","guid":{"rendered":"https:\/\/www.idstory.com\/?p=9063"},"modified":"2024-05-21T13:46:00","modified_gmt":"2024-05-21T11:46:00","slug":"netradicni-vyuziti-identity-managementu-dil-prvni","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/netradicni-vyuziti-identity-managementu-dil-prvni\/","title":{"rendered":"Netradi\u010dn\u00ed vyu\u017eit\u00ed Identity Managementu d\u00edl prvn\u00ed"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tIdentity Management (IDM) m\u016f\u017ee slou\u017eit k mnoha \u00fa\u010del\u016fm. Z\u00e1kladn\u00edm p\u0159\u00ednosem je automatizace a zaveden\u00ed po\u0159\u00e1dku ve spr\u00e1v\u011b \u00fa\u010dt\u016f a jejich pr\u00e1v v mnoha heterogenn\u00edch syst\u00e9mech. IDM se st\u00e1v\u00e1 z\u00e1kladn\u00edm stavebn\u00edm kamenem bezpe\u010dnosti p\u0159i nakl\u00e1d\u00e1n\u00ed s informacemi o \u00fa\u010dtech, bezpe\u010dnosti cel\u00e9 organiza\u010dn\u00ed struktury. IDM m\u00e1 srozumiteln\u00e9 webov\u00e9 rozhran\u00ed pro administraci, m\u00e1 konektory na syst\u00e9my. M\u00e1 parametrizovateln\u00e9 schvalovac\u00ed workflow, v\u0161e se audituje. Pro\u010d tolik informac\u00ed a funkc\u00ed nevyu\u017e\u00edt k dal\u0161\u00edm \u00fakol\u016fm? S takov\u00fdm syst\u00e9mem mohu schvalovat nejenom \u00fa\u010dty, ale tak\u00e9 jak\u00e9koliv p\u0159ed\u00e1v\u00e1n\u00ed fyzick\u00fdch v\u011bc\u00ed \u2013 nap\u0159\u00edklad p\u0159\u00edstupov\u00e9 karty, ale i licence, VPNky, pr\u00e1va k souborov\u00fdm slo\u017ek\u00e1m, dovolen\u00e9, objedn\u00e1vky, n\u00e1kupy atd. Poj\u010fme se tedy pod\u00edvat detailn\u011bji na n\u011bkter\u00e9 z netradi\u010dn\u00edch vyu\u017eit\u00ed.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Spr\u00e1va souborov\u00e9ho syst\u00e9mu \u2013 Microsoft Active Directory<\/b><\/h2>

Active Directory (AD) poskytuje jako jednu ze slu\u017eeb sd\u00edlen\u00e9 souborov\u00e9 slo\u017eky (sd\u00edlen\u00e9 disky). Co ale AD nenab\u00edz\u00ed, je funkce jednoduch\u00e9ho schvalov\u00e1n\u00ed \u017e\u00e1dost\u00ed o p\u0159\u00edstup ke sd\u00edlen\u00fdm slo\u017ek\u00e1m. IDM m\u016f\u017ee tuto funkci zajistit. Nastaven\u00ed pr\u00e1v ke slo\u017ek\u00e1m lze v IDM delegovat od admin\u016f k u\u017eivatel\u016fm i vlastn\u00edk\u016fm slo\u017eek\/dat. U\u017eivatel za\u0159azen\u00fd do ur\u010dit\u00e9 skupiny v AD tak m\u00e1 pr\u00e1vo na sd\u00edlen\u00fd disk. Admini se o p\u0159\u00edstupy k t\u011bmto slo\u017ek\u00e1m nemus\u00ed starat. Nastaven\u00ed pr\u00e1v ke slo\u017ek\u00e1m v IDM je pro u\u017eivatele transparentn\u00ed a jednoduch\u00e9.<\/p>

Po technologick\u00e9 str\u00e1nce se cel\u00e9 \u0159e\u0161en\u00ed skl\u00e1d\u00e1 ze dvou \u010d\u00e1st\u00ed \u2013 za\u0159azov\u00e1n\u00ed u\u017eivatel\u016f do skupin v AD a spou\u0161t\u011bn\u00ed skript\u016f pro nastavov\u00e1n\u00ed pr\u00e1v na adres\u00e1\u0159\u00edch.<\/p>

Certifika\u010dn\u00ed autorita<\/b><\/h2>

Organizace pot\u0159ebuje pracovat s certifik\u00e1ty, nap\u0159\u00edklad pro p\u0159\u00edstupy do aplikac\u00ed bez hesel. Lze si zakoupit certifik\u00e1ty ve\u0159ejn\u011b uzn\u00e1van\u00e9, kter\u00e9 jsou ov\u0161em placen\u00e9. Nebo si ve firm\u011b m\u016f\u017eete postavit certifika\u010dn\u00ed autoritu vlastn\u00ed. Pak si m\u016f\u017eete vyd\u00e1vat certifik\u00e1ty uzn\u00e1van\u00e9 pouze v r\u00e1mci va\u0161\u00ed organizace. Jejich vyd\u00e1n\u00ed je zcela zdarma. K tomuto \u00fa\u010delu lze velmi dob\u0159e vyu\u017e\u00edt Identity Manager integrovan\u00fd s certifika\u010dn\u00ed autoritou. Pro u\u017eivatele je p\u0159irozen\u00e9 si v u\u017eivatelsk\u00e9m rozhran\u00ed IDM jednodu\u0161e za\u017e\u00e1dat o certifik\u00e1t. IDM zajist\u00ed schvalov\u00e1n\u00ed garantem a p\u0159ed\u00e1v\u00e1n\u00ed certifik\u00e1t\u016f u\u017eivateli\u00a0 i do aplikac\u00ed, kam se m\u00e1 hl\u00e1sit bez hesla. IDM hl\u00edd\u00e1 platnost certifik\u00e1tu, jeho vypr\u0161en\u00ed, revokaci nebo zm\u011bnu garanta.<\/p>

Dovolen\u00e9 \u2013 \u017e\u00e1dosti, schv\u00e1len\u00ed a evidence<\/b><\/h2>

Pot\u0159ebujete jednodu\u0161e \u017e\u00e1dat, schvalovat a evidovat dovolen\u00e9, p\u0159\u00edpadn\u011b je n\u011bkam zapisovat. Jak na to v IDM?<\/p>

Pro jednoduchost pou\u017eijme roli, s parametry od kdy a do kdy. IDM zn\u00e1 m\u00e9ho nad\u0159\u00edzen\u00e9ho. Vstoup\u00edm do port\u00e1lu IDM, po\u017e\u00e1d\u00e1m o roli\u00a0Dovolen\u00e1<\/i>, vypln\u00edm term\u00edn a d\u00e1m ke schv\u00e1len\u00ed. Nad\u0159\u00edzen\u00ed (jeden nebo v\u00edce) \u017e\u00e1dost schv\u00e1l\u00ed a dovolen\u00e1 se zaeviduje. IDM prop\u00ed\u0161e informaci do syst\u00e9mu dovolenek. Vyu\u017e\u00edvaj\u00ed se k tomu zabudovan\u00e9 funkce IDM:<\/p>

  • \u017eivotn\u00ed cyklus rol\u00ed,<\/li>
  • organiza\u010dn\u00ed struktura \u2013 v\u00edm, kdo je m\u016fj nad\u0159\u00edzen\u00fd,<\/li>
  • workflow schvalov\u00e1n\u00ed \u2013 v\u00edcekolov\u00e9, mo\u017enost vr\u00e1cen\u00ed k dopln\u011bn\u00ed, odm\u00edtnut\u00ed,<\/li>
  • z\u00e1stupy i eskalace ve schvalov\u00e1n\u00ed, pokud je nad\u0159\u00edzen\u00fd nedostupn\u00fd,<\/li>
  • v u\u017eivatelsk\u00e9m port\u00e1lu IDM vid\u00edm stav sv\u00e9ho po\u017eadavku,<\/li>
  • evidence spln\u011bn\u00fdch po\u017eadavk\u016f.<\/li><\/ul>

    Z\u00e1v\u011br<\/h2>

    IDM je integra\u010dn\u00ed n\u00e1stroj, kter\u00fd umo\u017e\u0148uje na\u010d\u00edtat, transformovat, prezentovat, schvalovat a ukl\u00e1dat velk\u00fd rozsah r\u016fzn\u00fdch dat. Proto jej lze vyu\u017e\u00edt k mnoha \u00fa\u010del\u016fm, ne jen pro \u00fa\u010dty a pr\u00e1va.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

    Identity Management (IDM) m\u016f\u017ee slou\u017eit k mnoha \u00fa\u010del\u016fm. Z\u00e1kladn\u00edm p\u0159\u00ednosem je automatizace a zaveden\u00ed po\u0159\u00e1dku ve spr\u00e1v\u011b \u00fa\u010dt\u016f a jejich pr\u00e1v v mnoha heterogenn\u00edch syst\u00e9mech. IDM se st\u00e1v\u00e1 z\u00e1kladn\u00edm stavebn\u00edm kamenem bezpe\u010dnosti p\u0159i nakl\u00e1d\u00e1n\u00ed s informacemi o \u00fa\u010dtech, bezpe\u010dnosti cel\u00e9 organiza\u010dn\u00ed struktury. IDM m\u00e1 srozumiteln\u00e9 webov\u00e9 rozhran\u00ed pro administraci, m\u00e1 konektory na syst\u00e9my. M\u00e1 parametrizovateln\u00e9 […]<\/p>\n","protected":false},"author":6,"featured_media":9069,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32],"tags":[],"class_list":["post-9063","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=9063"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9063\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/9069"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=9063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=9063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=9063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}