IAM appliance
Home
Products
IAM appliance CzechIdM
Resources
CzechIdM documentation Redmine GitHub
Download

IAM appliance - Administrator Guide

    • Administrator Guide
      • Introduction
      • Appliance architecture
      • First boot
      • Extend the disk
      • Replacing the HTTPS certificate
      • Using Let’s Encrypt certificates
      • Connector server setup
      • Directory server LDAP
      • Replacing the LDAPS certificate
      • CzechIdM database backups
      • Service sizing
      • Operating system hardening
      • The removal of unused Docker images
      • Locally defined DNS hostnames
      • Proxy support
      • Changing the network range of the appliance
      • Known issues
    • Update Guide
      • Performing operating system updates
      • Performing appliance services update
      • Upgrade CzechIdM from 10.x/11.x to 12.x
      • Upgrade CAS to 6.5.x
      • Migration to Rocky Linux 8.x
      • List of releases and package versions
    • IdStory IdM - CzechIdM
      • Proxy support for relinking
    • IdStory AM - CAS
      • Security hardening
      • SPNEGO authentication
      • Login dialog customization
      • Configuring CORS
      • OpenID Connect IdP
        • Authorization Code flow
        • Authorization Code flow with PKCE
        • Resource Owner (Password) flow
        • Client Credentials flow
        • Configuring scopes
      • Two-factor authentication
        • OTP tokens via e-mail
        • OTP tokens via SMS
        • Google Authenticator
        • Enforcing 2FA for subset of users
      • Consuming external identities
        • Trusted HTTP headers
        • eIDAS
        • Entra ID
      • Localization and text customization
    • IdStory HUB
      • Installation
    • Monitoring
      • Remote Log Forwarding
IAM appliance - Administrator Guide develop
  • CzechIAM appliance documentation
    • 1.0 alpha1
  • CzechIAM appliance documentation - iam-firstboot
    • develop
    • 0.3
  • CzechIAM appliance documentation - podpůrná infrastruktura
    • 1.1
    • 1.0
  • IAM appliance - Administrator Guide
    • develop
    • 1.2
    • 1.1
    • 1.0
    • 0.6
    • 0.5
  • IAM appliance - iam-app-cas
    • develop
    • 0.9
  • IAM appliance - iam-app-connector-server
    • develop
    • 0.4
  • IAM appliance - iam-app-czechidm
    • develop
    • 1.0
  • IAM appliance - iam-app-czechidm-db
    • develop
    • 0.6
  • IAM appliance - iam-app-directory-server
    • develop
    • 0.4
  • IAM appliance - iam-app-web-proxy
    • develop
    • 0.8
  • IAM appliance - iam-appliance
    • develop
    • 1.2
  • IAM appliance - iam-appliance-repos
    • develop
    • 0.5
  • IAM appliance - iam-dns
    • develop
    • 0.2
  • IAM appliance - iam-docker-compose
    • develop
    • 0.1-1
  • IAM appliance - iam-docker-settings
    • develop
    • 0.3
  • IAM appliance - iam-filesystem
    • develop
    • 0.3
  • IAM appliance - iam-letsencrypt-support
    • develop
    • 0.1
  • IAM appliance - iam-rsyslog-settings
    • develop
    • 0.2-1
  • IAM appliance - openldap-docker
    • develop
    • 1.4.0-r3
  • IAM appliance documentation - BaseOS virtuál
    • 1.1
    • 1.0 alpha1
  • IAM appliance - Administrator Guide
  • IdStory AM - CAS
  • Consuming external identities
develop 1.2 1.1 1.0 0.6 0.5
Edit this Page

Consuming external identities

IAM appliance is able to consume identities from external Identity Provider (IdP). Those identities can then access some services in the organization’s infrastructure.

Enforcing 2FA for subset of users Trusted HTTP headers

Except where otherwise noted, wiki.czechidm.com, CzechIdM, and the CzechIAM, are licensed under the MIT License.