Search Results

Description Soffid console provides an option that allows you to customize policies to assign or revoke roles automatically to specific users. To assign or revoke roles, the users must comply with the defined requirements. That option allows you to Preview c...

Definition Password domain Is a logical way of grouping managed systems that are sharing the same password for each account. If the administrator chooses to have the same password for every system, only one password domain should exist. If the administrator ...

Installation Prerequisites To install Soffid LDAP, you must install Docker. Despite Docker desktop can be used for testing purposes, Docker container runtime usage is recommended. Installation To start Soffid LDAP, execute: docker volume create ldapconf ...

Description The host screen lets the administrator manage a static IP address assigned to any host. Dynamic IP addresses are automatically managed by Soffid ESSO. Screen overview Related objects Network Operating systems Custom attributes Basics ...

Then, the third step will be to launch the network discovery process. That is the process in charge to scan the network, getting the hosts information, and connecting to the hosts as well. Step-by-step 1. The discovery network task can be executed manually...

Description An identity provider (abbreviated IdP or IDP) is a system entity that creates, maintains, and manages identity information for principals and also provides authentication services to relying applications within a federation or distributed networ...

Description The user is the core object of the system. In Soffid, a user means an identity (usually a person). Every user can have a number of accounts spread on different information systems. In traditional system management, one can assign roles and permis...

Description Schedule jobs display all the asynchronous tasks generated for the workflows engine. When a job is finished, it will disappear from that list. Standard attributes ID: job identifier. Name: job name. Process: process identifier and descriptio...

Description Displays the tasks in which the user is involved like a supervisor, manager, or person responsible for approving or rejecting those tasks. My tasks provides information about the process, the task, the start and due date and the asigned user. By ...

Soffid Architecture Soffid system is composed of up to five different components: IAM console  Sync server Repository PAM Jump server (optional) LDAP Directory server (optional) Enterprise SSO (optional) IAM Console Is the portal used by admin...

The purpose of this tutorial is to show how to initialize a MariaDB database required for Soffid IAM installation on Kubernetes. MySQL/MariaDB To initialize MariaDB on Kubernetes first of all you must create a Persistent Volume. Storage in the cluster will b...

Once the database replica is setup, it's important to guarantee transactianality rules. To achive it, one database instance must be acting as the master and other as the slave. Using corosync and pacemaker, you can configure a floating IP address that will ma...

When making any manual changes to the Sync server configuration files, it will be necessary to copy these changes to the Kubernetes secrets. Command example:  java -cp "/opt/soffid/iam-sync/bin/bootstrap.jar" com.soffid.iam.sync.bootstrap.KubernetesSaver ...

The purpose of this tutorial is to show how to install Jump servers and configure PAM using Docker compose, to use critical resources without knowing the password required. Jump Server A jump server, jump host or jump box is a system on a network used to a...

Definition Soffid provides the functionality that allows you to Configure PAM session servers. To configure that functionality is mandatory to install PAM following the instructions of the PAM installation page. A Jump server is the control point that force...

Description The User Management Process type is used to define business processes to create and update identities and their attributes. You can use the default template included on Soffid BPM Editor and customize it with your business needs. Also, you can im...

Description The Permissions Management Process type is used to define processes used to grant or remove permissions to an identity. You can use the default template  Permissions management included on Soffid BPM Editor and customize it with your business nee...