Search Results

Password Vault Policy Enforcement Point Use case example 1 We want to define a policy to restrict access to the Soffid Password Vault. The users who are assigned to the SOFFID_ADMIN role (from this point forward: end-users) will have limitations to perform ...

WS-Federation (Web Services Federation) is an Identity Federation specification WS-Federation defines mechanisms for allowing different security realms to broker information on identities, identity attributes and authentication. WS-Federation focuses on fed...

Steps Attribute definition First of all, will be mandatory to create two new attributes  User principal name AD SID Bear in mind, that those attributes have to be retrieved from the appropriate system: And those attributes have to be defined in t...

Introduction WS-Federation (Web Services Federation) is an Identity Federation specification Sign-On http://docs.oasis-open.org/wsfed/federation/v1.2/cd/ws-federation-1.2-spec-cd-01.html

Definition That is the first step of the workflow. At that step, you could define the fields you want to show when the end users will go to make a request. Steps Tabs Task details This process type does not have task details for the start step. Fields In...

Definition That is the first step of the workflow. At that step, you could define the fields you want to show when the end users will go to make a request. Steps Tabs Task details In this tab you could configure next parameters: Task name: identified na...

Definition That is the first step of the workflow. At that step, you could define the fields you want to show when the end users. In that case, the request will be launched automatically when the end users request to use a privileged account to connect to a p...

Definition That is the first step of the workflow. At that step, you could define the fields you want to show when the end users. In that case, the request will be launched automatically when the end users request to use a privileged account to connect to a p...

Description Soffid’s role mining feature applies data mining technology to create business profiles based upon current application permissions in order to minimize the number of roles to be managed and maintained with the relevant cost saving. In this contex...

Definition The OTP settings allow the administrator users to configure the available OPT options. Soffid provides four different OTP implementations. Main Menu > Administration > Configuration > Security settings > OTP settings Screen overview Standard...

What is a Custom script? The Administration Addon provides the capacity to launch custom scripts to perform any functionality or process that the Soffid API  has available. Additionally, with this addon, there is available the possibility to enable a special...

Description Soffid provides you the functionality that allows to the users recover their passwords. To do that, the admin user, o a user with the proper roles, must config the the password recovery parameters. Screen Overview Custom attributes Enable e...

Step-by-step 1. To deploy the identity provider is advisable to install a dedicated sync server. It can be configured as a proxy sync server as it does not need direct access to Soffid database. Instead, it will connect to main sync servers to get users and f...

There is a service point to allow users change their passwords. Simply redirect the user to: https://<YOUR_SYNCSERVER_HOSTNAME>:1443/protected/passwordChange For instance: https://iam-sync-idp.soffidnet:1443/protected/passwordChange 💻 Image The u...

Operations This page shows the operations that can be performed for the user object. List all Request GET http://<your-domain>/soffid/webservice/scim2/v1/User Response 200 OK { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:ListRespons...

Definition This step is used to define a custom script that will be executed  Steps Tabs Task details All the process types have the same Task details for the Custom step: Script: allows you to define a Script this step allows you to add a script to be ...

Definition The Service Providers are standard applications that rely on Identity Providers to let the users log in. Join federation To join the federation, the service provider management team must deliver its "Metadata". The service provider Metadata descr...

Description Soffid can use any document repository to store documents generated by workflows, reporting addon, or any other addon. The document repository can be either a local directory or a remote one accessed using FTP, SMB, HTTP protocols. Depending on t...

Definition That is the first step of the workflow. At that step, you could define the fields you want to show when the end users. In that case, the request will be launched automatically when the end users request to use a privileged account to connect to a p...

Description BPM is a technology that allows modeling, implementing, and executing processes automatically to enhance efficiency and productivity in support of enterprise goals. Soffid includes a BMP (Business Process Management) in its Smart Engine to provid...