Advanced Search
Search Results
663 total results found
Network discovery
Description The Network discovery tool will be in charge to scan the networks to find the hosts and retrieve information about user accounts. Network discovery can detect system accounts as well. First of all, you need to create the networks that you want to...
Soffid Objects (for agent mappings)
You can consult the list of Soffid attributes: User Object Account Object Group Object Role Object Grant Object Maillist Object Membership Object dispatcherService Authoritative change object User object A user objects are maps that hold the...
Sample scripts
Introduction Note that Soffid supports different scripting languages, you can configure it in the Smart engine settings screen. Soffid 4 configures the smart engine with Javascript scripting language as the default. Additionally, in the initial configuration...
Utility classes
Crypt Crypt allows to encrypt text with different algorithms and verify the resulting hash. To use this class: com.soffid.iam.crypt.Crypt All methods are static: hash(String algorithm, String text) -> String pBKDF2Sha256(String text, String utf8Salt, int ...
Configure Workflow engine
Description This page groups together several features related to the workflow engine. Document manager Soffid can use any document repository to store documents generated by workflows, reporting addon, or any other addon. The document repository can be ei...
Business process definition
Description Soffid includes a BMP (Business Process Management) in its Smart Engine to provide useful workflows integrated with the processes and the policies of the Soffid core. In order to add extra functionality to the console, you can upload different b...
BPM editor (addon bpm)
Description BPM is a technology that allows modeling, implementing, and executing processes automatically to enhance efficiency and productivity in support of enterprise goals. Soffid includes a BMP (Business Process Management) in its Smart Engine to provid...
Authorizations
Definition Soffid console provides a granular access control system. That granular control system allows the administrator user to assign granular permissions to roles. Be in mind that some permissions may inherit some other permissions. You cannot assign pe...
Authentication
Definition This page gathers different types of settings that may affect user authentication in the Soffid Console. Soffid could use different kinds of external authentication sources. These mechanisms could be selectively enabled or disabled. Screen overvi...
Password policies
Definition On this page, you can configure the password policies that will be applied when assigning a new password, always depending on the password domain selected by that system and the type of user selected. Therefore, the two main components of this pag...
Configure PAM session servers
Definition Soffid provides the functionality that allows you to configure the Jump servers. To configure that functionality is mandatory to install PAM following the instructions of the PAM installation page. A Jump server is the control point that forces u...
PAM policies
Definition Privileged Access Management (PAM) policies are a set of guidelines and controls that dictate how privileged access is granted, managed, and audited within an organization. Soffid allows you to define policies, those policies can be made up of sev...
PAM rules
Definition Soffid allows you to define rules to detect commands executed on a server. When a user launches a command defined on a rule, Soffid will detect it. To use those rules you need to define the PAM policies. For more information, you can visit the PAM...
Issue policies
Definition Soffid has defined automatic events by default. For each of these events, it is possible to define the tasks to be performed and configure them. Once the necessary issues have been configured, there are other screens for viewing and managing them....
Digital certificates (addon federation)
Definition Soffid includes Digital certificate functionality as a security enhancement. You could add new Digital certificates, internal or external. If you select the external certificate, you could add a valid certificate to Soffid; If you select the inter...
OTP settings (addon otp)
Definition The OTP settings allow the administrator users to configure the available OTP options. Soffid provides six different OTP implementations. This page is available if you have previously installed the Soffid OTP add-on. Configure these options as a ...
Password recovery configuration (addon recovery)
Description Soffid provides you the functionality that allows to the users recover their passwords. To do this, the administrator user, or a user with the proper roles/authorizations, must first config the password recovery settings. This setting can be use...
Attribute definition (addon federation)
Description The attribute definition page displays all the auto-generated user attributes. Those attributes will be the attributes to deliver from the identity providers to the service providers depending on the defined rules. Soffid has a default implementa...
Attribute sharing policies (addon federation)
Description Soffid allows you to define security rules as policies that apply to any attribute that should be delivered from identity providers to service providers. Please note that at least one policy must be created to return attributes to service provide...
Identity providers (addon federation)
Description This screen allows you to define the most important components of a federation, which are none other than the identity providers. An identity provider is responsible for performing the appropriate authentication for each service provider and user ...