{"id":9930,"date":"2026-06-10T16:36:20","date_gmt":"2026-06-10T14:36:20","guid":{"rendered":"https:\/\/www.idstory.com\/?p=9930"},"modified":"2026-06-15T14:59:44","modified_gmt":"2026-06-15T12:59:44","slug":"virtualni-systemy-v-iga-jak-procesne-podchytit-spravu-aplikaci-bez-api","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/virtualni-systemy-v-iga-jak-procesne-podchytit-spravu-aplikaci-bez-api\/","title":{"rendered":"Virtu\u00e1ln\u00ed syst\u00e9my v IGA: Jak procesn\u011b podchytit spr\u00e1vu aplikac\u00ed bez API"},"content":{"rendered":"<h2><span style=\"font-weight: 400;\">Virtu\u00e1ln\u00ed syst\u00e9my v IGA: Jak procesn\u011b podchytit spr\u00e1vu aplikac\u00ed bez API. <\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Nasazen\u00ed IGA n\u00e1stroje \u010dasto kon\u010d\u00ed u syst\u00e9m\u016f, kter\u00e9 maj\u00ed standardizovan\u00e9 API nebo dostupn\u00e9 rozhran\u00ed p\u0159es kter\u00e9 se lze p\u0159ipojit. P\u0159\u00edstupy k ostatn\u00edm aplikac\u00edm a server\u016fm z\u016fst\u00e1vaj\u00ed spravov\u00e1ny manu\u00e1ln\u011b mimo centr\u00e1ln\u00ed syst\u00e9m, co\u017e vede k rozpadu procesn\u00ed kontinuity a ztr\u00e1t\u011b p\u0159ehledu o skute\u010dn\u011b p\u0159id\u011blen\u00fdch opr\u00e1vn\u011bn\u00edch. Ka\u017ed\u00fd syst\u00e9m mimo IGA p\u0159edstavuje riziko, a\u0165 u\u017e je d\u016fvod jak\u00fdkoli.<\/span><\/p>\n<p><b>T\u0159i sc\u00e9n\u00e1\u0159e pro nasazen\u00ed Virtu\u00e1ln\u00edho syst\u00e9mu (VS)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Virtu\u00e1ln\u00ed syst\u00e9m nen\u00ed technick\u00fdm konektorem, ale registra\u010dn\u00edm re\u017eimem v r\u00e1mci IdM.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">T<\/span><span style=\"font-weight: 400;\">ent<\/span><span style=\"font-weight: 400;\">o model je u\u017eite\u010dn\u00fd v n\u00e1sleduj\u00edc\u00edch situac\u00edch:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ekonomick\u00e1 bari\u00e9ra: Pokud syst\u00e9m generuje n\u00edzk\u00fd po\u010det zm\u011bn, v\u00fdvoj a \u00fadr\u017eba plnohodnotn\u00e9ho API napojen\u00ed je ekonomicky neefektivn\u00ed.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Technick\u00e1 nekompatibilita: C\u00edlov\u00fd syst\u00e9m nedisponuje \u017e\u00e1dn\u00fdm rozhran\u00edm (API, datab\u00e1zov\u00e9 tabulky) pro online spr\u00e1vu \u00fa\u010dt\u016f.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">P\u0159\u00edpravn\u00e1 f\u00e1ze: VS umo\u017e\u0148uje okam\u017eit\u011b zav\u00e9st schvalovac\u00ed procesy v IdM, zat\u00edmco se technick\u00e1 integrace teprve analyzuje nebo vyv\u00edj\u00ed.<\/span><\/li>\n<\/ul>\n<p><b>Role administr\u00e1tora<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Zaveden\u00ed VS z\u00e1sadn\u011b m\u011bn\u00ed roli administr\u00e1tora. V manu\u00e1ln\u00edm re\u017eimu administr\u00e1tor \u010dasto s\u00e1m rozhoduje, komu p\u0159\u00edstup ud\u011bl\u00ed. V re\u017eimu VS se st\u00e1v\u00e1 implement\u00e1torem, kter\u00fd vykon\u00e1v\u00e1 schv\u00e1len\u00e9 po\u017eadavky z IdM.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Z toho plyne, \u017ee implement\u00e1tor nen\u00ed schvalovatelem; o opr\u00e1vn\u011bnosti po\u017eadavku rozhoduje byznys proces (vlastn\u00edk role, mana\u017eer) v r\u00e1mci IdM. Odm\u00edtnut\u00ed realizace po\u017eadavku je p\u0159\u00edpustn\u00e9 pouze v od\u016fvodn\u011bn\u00fdch technick\u00fdch p\u0159\u00edpadech, jinak vznik\u00e1 nebezpe\u010dn\u00fd rozd\u00edl mezi evidenc\u00ed a realitou.<\/span><\/p>\n<p><b>Srovn\u00e1n\u00ed model\u016f: Jak hluboko do syst\u00e9mu vid\u00edme?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">P\u0159i implementaci VS je nutn\u00e9 ur\u010dit, jak\u00fdm zp\u016fsobem bude IdM interpretovat vnit\u0159n\u00ed opr\u00e1vn\u011bn\u00ed syst\u00e9mu. V\u00fdb\u011br modelu p\u0159\u00edmo ovliv\u0148uje schopnost organizace prov\u00e1d\u011bt audity a recertifikace.<\/span><\/p>\n<table style=\"height: 124px;\" width=\"1055\">\n<tbody>\n<tr>\n<td><b>Model VS<\/b><\/td>\n<td><b>Charakteristika<\/b><\/td>\n<td><b>Struktura pr\u00e1v<\/b><\/td>\n<td><b>Vhodnost pro recertifikaci<\/b><\/td>\n<\/tr>\n<tr>\n<td><b>Jednoduch\u00fd VS<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Spravuje pouze existenci \u00fa\u010dtu.<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Jedna login role (U\u017eivatel ano\/ne).<\/span><\/td>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Minim\u00e1ln\u00ed (pouze revize \u00fa\u010dtu).<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>VS s textov\u00fdmi pr\u00e1vy<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Hybridn\u00ed model s textov\u00fdm polem.<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Voln\u00fd text (nap\u0159. \u201ep\u0159\u00edstup k modulu A\u201c).<\/span><\/td>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Nevhodn\u00e1 (strojov\u011b ne\u010diteln\u00e9).<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Full RBAC VS<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Ka\u017ed\u00e9 pr\u00e1vo je samostatn\u00e1 role v IdM.<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Strukturovan\u00e9 role odpov\u00eddaj\u00edc\u00ed pr\u00e1v\u016fm.<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Pln\u011b vhodn\u00e1 (strojov\u00e1 \u010ditelnost).<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Zat\u00edmco Jednoduch\u00fd VS sta\u010d\u00ed pro evidenci z\u00e1kladn\u00edho p\u0159\u00edstupu, VS s textov\u00fdmi pr\u00e1vy sice urychluje nasazen\u00ed, ale znemo\u017e\u0148uje automatizovan\u00e9 revize, proto\u017ee textov\u00fd popis pr\u00e1va nelze strojov\u011b vyhodnotit. Pro plnohodnotnou IGA strategii je doporu\u010den\u00fdm standardem Pln\u00fd RBAC VS.<\/span><\/p>\n<p><a href=\"https:\/\/www.idstory.com\/wp-content\/uploads\/2026\/06\/chatgpt-image-jun-10-2026-04-24-38-pm-1.png\"><img decoding=\"async\" class=\"aligncenter wp-image-9933\" src=\"https:\/\/www.idstory.com\/wp-content\/uploads\/2026\/06\/chatgpt-image-jun-10-2026-04-24-38-pm-1-300x200.png\" alt=\"Virtu\u00e1ln\u00ed syst\u00e9my\" width=\"509\" height=\"339\" srcset=\"https:\/\/www.idstory.com\/wp-content\/uploads\/2026\/06\/chatgpt-image-jun-10-2026-04-24-38-pm-1-300x200.png 300w, https:\/\/www.idstory.com\/wp-content\/uploads\/2026\/06\/chatgpt-image-jun-10-2026-04-24-38-pm-1-1024x683.png 1024w, https:\/\/www.idstory.com\/wp-content\/uploads\/2026\/06\/chatgpt-image-jun-10-2026-04-24-38-pm-1.png 1536w\" sizes=\"(max-width: 509px) 100vw, 509px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><b>\u017divotn\u00ed cyklus zm\u011bny a validace shody<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Proces za\u010d\u00edn\u00e1 v IdM, kde je na z\u00e1klad\u011b kriti\u010dnosti role (Criticality) vyvol\u00e1no schvalov\u00e1n\u00ed. Po schv\u00e1len\u00ed IdM p\u0159epo\u010d\u00edt\u00e1 po\u017eadovan\u00fd stav a vygeneruje \u00fakol pro implement\u00e1tora. Ten po proveden\u00ed fyzick\u00e9 zm\u011bny \u00fakol v IdM potvrd\u00ed. Aby se zabr\u00e1nilo odchylce syst\u00e9mu od evidence v IdM, mus\u00ed prob\u00edhat pravideln\u00e1 rekonciliace. Ta spo\u010d\u00edv\u00e1 ve srovn\u00e1n\u00ed exportu dat z c\u00edlov\u00e9ho syst\u00e9mu s reportem z IdM. Pokud jsou nalezeny nesrovnalosti, proces vynucuje n\u00e1pravu, bu\u010f zp\u011btn\u00fdm schv\u00e1len\u00edm v IdM, nebo p\u0159\u00edkazem k odstran\u011bn\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu v syst\u00e9mu.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">T\u00edmto zp\u016fsobem IGA garantuje integritu opr\u00e1vn\u011bn\u00ed i v prost\u0159ed\u00ed, kter\u00e9 technologicky nevy\u017eaduje nebo neumo\u017e\u0148uje plnou automatizaci.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Virtu\u00e1ln\u00ed syst\u00e9my v IGA: Jak procesn\u011b podchytit spr\u00e1vu aplikac\u00ed bez API. Nasazen\u00ed IGA n\u00e1stroje \u010dasto kon\u010d\u00ed u syst\u00e9m\u016f, kter\u00e9 maj\u00ed standardizovan\u00e9 API nebo dostupn\u00e9 rozhran\u00ed p\u0159es kter\u00e9 se lze p\u0159ipojit. P\u0159\u00edstupy k ostatn\u00edm aplikac\u00edm a server\u016fm z\u016fst\u00e1vaj\u00ed spravov\u00e1ny manu\u00e1ln\u011b mimo centr\u00e1ln\u00ed syst\u00e9m, co\u017e vede k rozpadu procesn\u00ed kontinuity a ztr\u00e1t\u011b p\u0159ehledu o skute\u010dn\u011b p\u0159id\u011blen\u00fdch opr\u00e1vn\u011bn\u00edch. [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":9938,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32,27,34],"tags":[],"class_list":["post-9930","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager","category-idstory","category-konektory"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=9930"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9930\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/9938"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=9930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=9930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=9930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}