<div dir="ltr">I wanted to reply to this one,<div><br></div><div>"<span style="font-size:13px;font-family:Arial,Helvetica,sans-serif">or if the roles, etc in the IAM are strictly for permissions </span><i style="font-size:13px;font-family:Arial,Helvetica,sans-serif">within</i><span style="font-size:13px;font-family:Arial,Helvetica,sans-serif"> the IAM system itself and not meant to have meaning to outside systems."</span></div><div><span style="font-size:13px;font-family:Arial,Helvetica,sans-serif"><br></span></div><div><span style="font-size:13px;font-family:Arial,Helvetica,sans-serif">The roles,orgs,etc.. in midpoint can have meaning outside the system. A role/org in midpoint can be used to manage groups and roles in external systems, like LDAP groups or Unix groups and also generically.</span></div><div><span style="font-size:13px;font-family:Arial,Helvetica,sans-serif"><br></span></div><div><span style="font-size:13px;font-family:Arial,Helvetica,sans-serif">JASON</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 4, 2015 at 1:07 AM, Petr Gašparík <span dir="ltr"><<a href="mailto:petr@gasparik.cz" target="_blank">petr@gasparik.cz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Hi Jon, <br>
Main question is what do you want to achievr. :<br>
- do you want to manage existing users repositories across applications (with all those audits and reconciliations) - hence identity management? <br>
- or do you want to manage realtime access of users to the applications (with on the fly evaluation of risk profile etc) - hence access management?</p>
<p dir="ltr">MidPoint is very strong and suitable for the first case. For second case, there are others systems in IAM ecosystem, like Apereo's CAS</p>
<p dir="ltr">Regards, Petr Gašparík </p>
<p dir="ltr">Dne st 4. 11. 2015 1:19 uživatel Jon V <<a href="mailto:sito.org@gmail.com" target="_blank">sito.org@gmail.com</a>> napsal:</p>
<div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">hello. i have installed midpoint and played with it a little. <span style="font-family:Arial,Helvetica,sans-serif;font-size:13px">with all its complexity and options, i am still not sure if it is what i want to solve the problem i have.</span><div style="margin:0px;padding:0px;border:0px;font-family:Arial,Helvetica,sans-serif;font-size:13px"><br></div><div style="margin:0px;padding:0px;border:0px;font-family:Arial,Helvetica,sans-serif;font-size:13px">i have an application with a set of data which i want to allow various types of access to, based upon set of criteria tied to the user. i do not wish to reinvent the wheel and write my own code to manage users, groups, passwords, authentication, etc etc, so an IAM seems like a great idea. however, i am not clear about creating <i>arbitrary</i> roles/permissions/groups that my <i>application</i> will need -- if this is what an IAM is designed for? (or if the roles, etc in the IAM are strictly for permissions <i>within</i> the IAM system itself and not meant to have meaning to outside systems.)</div><div style="margin:0px;padding:0px;border:0px;font-family:Arial,Helvetica,sans-serif;font-size:13px"><br></div><div style="margin:0px;padding:0px;border:0px;font-family:Arial,Helvetica,sans-serif;font-size:13px">any tips on a place for a newbie to get assistance on usage of IAM would greatly be appreciated. thanks!</div><div style="margin:0px;padding:0px;border:0px;font-family:Arial,Helvetica,sans-serif;font-size:13px"><br></div><div style="margin:0px;padding:0px;border:0px;font-family:Arial,Helvetica,sans-serif;font-size:13px">-jon</div></div></div></div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span class="HOEnZb"><font color="#888888"><br>
</font></span></blockquote></div><span class="HOEnZb"><font color="#888888"><div dir="ltr">-- <br></div><div dir="ltr">--<div>Petr G.</div></div>
</font></span><br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">JASON</div></div>
</div>
<br>
<font size="2"><br><br>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </font><br>