Identity & Access Management in der
Realität: Goodbye, „Hello World“!
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
@RobinSedlaczek
RobinSedlaczek.com
RobinSedlaczek
RobinSedlaczek.com
robin.sedlaczek@live.de
 Community-Leader
 CTO der GmbH Berlin
 Sprecher | Autor | Blogger
Entwickler.de, Heise, DotNetPro, Informatik aktuell, BASTA!, .NET Summit,
ParallelCon, ADC, GUI & DESIGN, DevSpace, Spartakiade...
 Open Source-Entwickler
SharpGL, Roslyn, FxCopAnalyzers, Force Feedback Programming
.NET User Group Berlin-Brandenburg
Ihr habt Fragen?
Ich beantworte sie jederzeit gerne. For free hugs. 😉
Robin Sedlaczek
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
IAM in komplexen und verteilten
Anwendungen
@RobinSedlaczek
RobinSedlaczek.com
ZIELE
 Erfahrungsbericht aus der realen Welt
 Probleme
 Lösungen
 Standards (oAuth2 & Open ID Connect)
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
Über uns
@RobinSedlaczek
RobinSedlaczek.com
ÜBER UNS
Unsere Produkte
 Tools für strategische Finanzplanung in der Hotelindustrie
 Financial Controlling & Management Reporting für Hotelketten
 Payroll-Planung (Desktop-based)
 Gewinn-Verlust-Planung für Budgeting & Forecasting (Web-based)
 Konsolidierung (Web-based)
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
Die Herausforderungen
@RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
FairPlanner
 Web-based
 Multi-Tenancy Architecture
 Software-as-a-Service (SaaS)
 IAM: proprietär
@RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
FairPayroll FairChainFairPlanner
 Desktop-based
 Single-Tenancy
 On-Prem Installationen
 IAM: proprietär
 Web-based
 Multi-Tenancy
 IAM: proprietär
@RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
Server Instance
(Instances managed by Fairmas)
Server Instance 2
(Instances managed by Fairmas)
Server Instance 3
(Instances managed by Fairmas)
Server Instance 4
(Instances managed by Fairmas)
Server Instance 5
(Instances managed by Fairmas)
 Viele Server-Instanzen
 Skalierung, Staging etc.
 Jede Instanz hat eigene
User-DB
 Supportmitarbeiter besitzen
User-Accounts für jede
Umgebung
@RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
 Viele Server-Instanzen
 On-Prem / Off-Prem
Server Instance 1
(Instances managed by Fairmas)
Server Instance 2
(Instances managed by Fairmas)
Server Instance 3
(Instances managed by Fairmas)
Server Instance 4
(Instances managed by Fairmas)
Server Instance 1
(Instances managed by Fairmas)
Server Instance 2
(Instances managed by Fairmas)
Server Instance 3
(Instances managed by Fairmas)
Server Instance 4
(Instances managed by Fairmas)
On-Premise
 „Alle“ kommunizieren miteinander
 Jedes Tool hat proprietäres IAM
@RobinSedlaczek
RobinSedlaczek.com
On-Premise
External Hosting Provider
(Instances managed by Fairmas)
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
Der Lösungsansatz
@RobinSedlaczek
RobinSedlaczek.com
DER LÖSUNGSANSATZ
1. Beratungs-Workshop zu oAuth2 & Open ID Connect
2. Implementierung Identity Server
3. Authentifizierung in allen Produkten gegen IdentityServer
4. User Sync Prozesse
5. Integration AD/AAD via Active Directory Federation Services (ADFS)
@RobinSedlaczek
RobinSedlaczek.com
DER LÖSUNGSANSATZ
https://tools.ietf.org/html/rfc6749#page-31
Identity & Access Management in der
Realität: Goodbye, „Hello World“!
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com

Developer Week 2019: Identity & Access Management in der Realitaet

Hinweis der Redaktion