Chidimbu cheZita uye Kuwana manejimendi (IAM) uye Anopa Provider (IdP)

Chitupa uye Yekuwana manejimendi idziviriro yekuchengetedza iyo inogonesa vanhu chaivo kuti vawane zviwanikwa zvakanaka panguva yakakodzera yezvikonzero zvakanaka.

Mune ino posvo, isu tichafukidza muongororwo wezve misoro mikuru inosanganisirwa neZita uye Kuwana Management.

Chii chinonzi Chitupa

Kana munhu achiedza kuwana zviwanikwa, tinofanirwa kuona kuti mushandisi ndiye mushandisi anozviti ndiye.

Kuzivikanwa ndiyo nzira yekupa hunhu hwakasarudzika kune wega mushandisi wega kuitira kuti vazivikanwe.

Maapplication uye masystem anoshandisa chitupa kuona kana mushandisi achigona kuwana zviwanikwa.

Maitiro ehutariri manejimendi anosanganisira kugadzira, manejimendi uye kubviswa kwemazita pasina kumbonetseka nezve mazinga avo ekuwana.



Chii chinonzi Kusimbisa

Kusimbiswa ndiyo nzira yekuratidza kuzivikanwa. Kuti uite kudaro, mushandisi anofanira kuendesa zvitupa zvavo kuchinhu chechokwadi kuti awane mukana.

Kusimbiswa kunowanzozonzi AuthN.

Chitupa inoitika kana mushandisi achiti anozivikanwa (senge rine zita rekushandisa). Kusimbiswa inoitika kana vashandisi vachiratidza kuzivikanwa kwavo.

Kune akatiwandei mafomu echokwadi echokwadi:

Multi-factor Kusimbiswa (MFA)

Kazhinji, pane zvinhu zvitatu zvakajairika zvinogona kushandiswa pakusimbisa.

  • Chinhu chaunoziva (senge password)
  • Chinhu chauinacho (senge smart kadhi)
  • Chinhu chauri (senge chigunwe chemunwe kana imwe nzira yebhayometri)

Multi-factor kusimbiswa kunoshandisa 2 kana kupfuura yeimwe yeidzi nzira.

Icho chinangwa cheMult-factor chokwadi ndechekuwedzera imwe dura rekudzivirira kune yechokwadi maitiro.

Kusaina-Kuvhura (SSO)

Chiratidzo-Chega (SSO) chivakwa chinotendera mushandisi kupinda mune imwechete sisitimu, uye kuwana mukana kune mamwe masisitimu ane hukama nazvo.

Muenzaniso weSSO ndipo paunopinda muGoogle uye ipapo unokwanisa kuwana gmail, Google Docs, Google Sheets, pasina kuendesa rako rekupinda zvakare.

Federation

Federation irikungobvumidza SSO kuyambuka akawanda maseru. Google neFacebook ndidzo mbiri dzevanopa zvikuru veFederation.

Izvi zvinobvumidza vashandisi vedu kuratidza kusisitimu yedu vachishandisa zvitupa zvavo zvagara zviripo nevaya vanopa.

Zviratidzo

Zviratidzo zvinogona kuve Hardware kana software-yakavakirwa uye zvinopa yechokwadi nzira yekukomberedza 'chimwe chinhu chauinacho'.

Hardware tokeni inogona kuve 'smart makadhi' aunogona kushandisa kubatanidza kune yako komputa kuburikidza neye kadhi muverengi iyo inopa kuisirwa chokwadi.

Software ma tokeni anogona kazhinji kuiswa pane chero chishandiso (semuenzaniso runhare mbozha) uye anoshandiswa kugadzira imwe-nguva yekupfuura kodhi.

Mvumo

Mvumo ndiyo nzira yekumisikidza kuti ndevapi vashandisi vane mukana kune izvo zviwanikwa muhurongwa.

Vashandisi vanopihwa kana kupihwa mukana kune chaiwo zviwanikwa mukati mechirongwa. Uku kuwana kunowanzoenderana nebasa remushandisi.

Kamwe mushandisi paakasimbiswa, ipapo vanobvumidzwa kuwana zviwanikwa zvakapihwa.

Inoenderana:

Sei tichida IAM

Tinoda IAM nekuda kwezvikonzero zvinoverengeka:

Kutanga, tinoda IAM kuchengetedza masisitimu edu. Hatidi chero munhu kuti awane yedu yakavanzika kana yakavanzika dhata pasina kuratidza humbowo hwavo.

Chechipiri, tinofanirwa kuona kuti vanhu vane mvumo chete ndivo vanokwanisa kuwana zviwanikwa zvavanenge vapihwa.

Isu tinodawo IAM yekuzvidavirira. Kana chiito chikaitwa, tinofanirwa kuziva kuti ndiani akaita chiito ichocho. Tinogona kutarisa kumatanda ehurongwa ayo akapihwa chitupa. Pasina IAM, isu hatina nzira yekuziva kuti ndiani akaita chiito.

Uchishandisa Anopa Chitupa (IdP)

Mumazuva ekutanga apo vagadziri vakavaka mashandisiro aida kuvimbiswa kwevashandisi, vaitofanira kugadzira chitoro chevashandisi mukati mekushandisa kuti vazive. Pamusoro peizvozvo vagadziri vaifanirwa kugadzira imwe nzira yekusimbisa uye mabasa uye injini yekodzero.

Imwe neimwe nyowani nyowani yaida iyi setup. Zvinetso neizvi ndezvekuti kana nzira yekusimbisa yaifanira kuchinja, ivo vanogadzira vaifanira kugadzirisa ese mafomu kuti vakwanise izvo zvitsva zvinodiwa.

Kushandisa enzira yekusimbisa yemuno kunorwadza kune vashandisi, vanogadzira uye manejimendi:

  • Vashandisi vanofanirwa kuisa zita rekushandisa nephasiwedi kuti vawane yega application, kureva kuti hapana SSO kugona
  • Zvinogona kazhinji kukonzera kushandisa mapassword asina kusimba kana kushandiswazve kwepassword
  • Vagadziri vanofanirwa kubata imwe sevhisi
  • Hapana nzvimbo yepakati yekutarisira vashandisi

Uchishandisa Anopa Provider (IdP) inogadzirisa aya matambudziko.

Chirevo Kubva Kuwana Muenzaniso

Iyo yazvino Identity uye Yekushandisa Management manejimendi inoshandisa iyo yekuda based yekuwana modhi

Mune iyo yekuda yakavakirwa mukana wevanogadzira vanotsiva chokwadi chechokwadi muchikumbiro nepfungwa yakapusa iyo inogona kugamuchira kudana .

TO Vimba inosimbiswa pakati pechikumbiro uye sosi yekusimbisa uye mvumo mune ino kesi mutapi kana IDP.

Iko kunyorera kuchabvuma nemufaro izvo zvirevo zvinotumirwa kubva kuIdP.

Zvakare iko kunyorera hakufanirwe kubata chero mapassword sezvo vashandisi vasina kumbobvumidza zvakananga mukushandisa. Panzvimbo pezvo vashandisi vanobvumidza mumupi wekuzivisa iyo inogadzira chikumbiro kana chiratidzo chekuwana chinotumirwa kunyorera.

Kushandisa Anopa Chitupa zvinoreva:

  • Vagadziri havafanirwe kugadzira dzakasimba nzira dzechokwadi; uye havafanirwe kuchengetedza vashandisi mapassword
  • Kana shanduko munzira yekusimbisa ichidikanwa isu tinongoichinja pane anopa chitupa. Iko kunyorera kunoramba kusina kuchinjika
  • Vashandisi vanofara - vanogona kuve vanovimbiswa kamwechete mumupi wekuzivisa uye vasinganetsi kuwana zvimwe zvakapihwa kunyorera, kureva (SSO)
  • Vatariri vanofarawo - kana mushandisi akasiya kambani manejimendi anogona kudzima mushandisi mune yekuzivisa mupi uye nekukasira kubvisa mukana wese.

Pfupiso

Id

Kuzivikanwa ndiyo nzira yekupa hunhu hwakasarudzika kune wega mushandisi wega kuitira kuti vazivikanwe.

Kusimbiswa vs Mvumo

AuthN

  • Chiito chekuratidza kuti ndiwe ani
  • Kazhinji inonzi AuthN
  • Maitiro akajairwa eAuthN:

    • Fomu yakavakirwa chokwadi (zita rekushandisa nephasiwedi)

    • Multi Factor Kusimbiswa (MFA)

    • Zviratidzo

AuthZ

  • Chiito chekupa mumwe munhu mukana
  • Kazhinji inonzi AuthZ
  • Mienzaniso yeAuthZ

    • Chinhu chako chekushandisa inhengo yeboka. Iboka rine kodzero yefaira ine mamwe maropafadzo. Iwe unobvumidzwa kudyidzana nemafaira ari mukati mefaira.

IdP

  • Nzvimbo yepakati yekutarisira vashandisi, kuisirwa chokwadi uye mvumo
  • Yakachengeteka zvakanyanya, inosimbisa indasitiri zviyero mumushandisi uye password manejimendi
  • Inopa SSO
  • Nyore kuwana manejimendi uye kudzoserwa