- \n
- Have a registered account.<\/li>\n
- Can manage organizations and register applications.<\/li>\n<\/ul>\n<\/li>\n
- Organizations\n
- \n
- Are group of users that share resources of an application (roles and permissions).<\/li>\n
- Users can be members or owners (manage the organization).<\/li>\n<\/ul>\n<\/li>\n
- Applications\n
- \n
- has the client role in the OAuth 2.0 architecture and will request protected user data.<\/li>\n
- Are able to authenticate users using their Oauth credentials (ID and secret) which unequivocally identify the application<\/li>\n
- Define roles and permissions to manage authorization of users and organizations<\/li>\n
- Can register Pep Proxy to protect backends.<\/li>\n
- Can register IoT Agents.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Keyrock – users and permissions<\/h1>\n
Keyrock is an so called Generic Enabler in Fiware which allow the creation of users and organizations.You can also register new applications in order to use the OAuth2 protocol and manage roles and permissions.<\/p>\n
Wilma – PEP proxy<\/h1>\n
To allow only permitted users or applications to access a REST service a PEP-proxy is placed between the application and the endpoint of the REST-service. The PEP-proxy receives the requests only allowing those with and valid token.<\/p>\n
Authentication process<\/h1>\n
- \n
- Identify<\/li>\n
- Get an access token<\/li>\n
- Request REST-service via PEP-proxy<\/li>\n
- PEP-proxy asks if token is allowed for this service<\/li>\n
- OK-response from IDM<\/li>\n
- Access validated resource<\/li>\n<\/ol>\n
![\"\"](\"https:\/\/www.scapeler.com\/wp-content\/uploads\/2020\/08\/Screenshot-from-2020-08-30-10-20-47.png\")
<\/p>\nExamples IDM<\/h1>\n
![\"\"](\"https:\/\/www.scapeler.com\/wp-content\/uploads\/2020\/08\/Screenshot-from-2020-08-30-10-50-59.png\")
Sign in screen<\/figcaption><\/figure>\n ![\"\"](\"https:\/\/www.scapeler.com\/wp-content\/uploads\/2020\/08\/Screenshot-from-2020-08-30-10-30-31.png\")
Home page with applications and organizations<\/figcaption><\/figure>\n ![\"\"](\"https:\/\/www.scapeler.com\/wp-content\/uploads\/2020\/08\/Screenshot-from-2020-08-30-10-37-15.png\")
Applications for this user<\/figcaption><\/figure>\n ![\"\"](\"https:\/\/www.scapeler.com\/wp-content\/uploads\/2020\/08\/Screenshot-from-2020-08-30-12-45-32.png\")
PEP-proxy and IoT-sensor configuration of the application<\/figcaption><\/figure>\n ![\"\"](\"https:\/\/www.scapeler.com\/wp-content\/uploads\/2020\/08\/Screenshot-from-2020-08-30-10-36-00.png\")
Members of an organization and authorized applications<\/figcaption><\/figure>\n More information<\/h1>\n
- \n
- Fiware Identity management<\/a><\/li>\n
- Evaluation of an IoT Application-Scoped Access Control Model over a Publish\/Subscribe Architecture Based on FIWARE<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
To control and secure applications, web-services and IoT-devices there must be somekind of mechanism to control identity and levels of authorization, we need identity management. FIWARE implemented some services and tools to allow you to manage authentication and authorization in applications and backend services. Identity management concepts The main identity management concepts are: Users Have […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"iawp_total_views":3,"footnotes":""},"class_list":["post-5253","page","type-page","status-publish"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/pages\/5253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/comments?post=5253"}],"version-history":[{"count":11,"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/pages\/5253\/revisions"}],"predecessor-version":[{"id":5285,"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/pages\/5253\/revisions\/5285"}],"wp:attachment":[{"href":"https:\/\/www.scapeler.com\/index.php\/wp-json\/wp\/v2\/media?parent=5253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- Evaluation of an IoT Application-Scoped Access Control Model over a Publish\/Subscribe Architecture Based on FIWARE<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
- Fiware Identity management<\/a><\/li>\n