https://wiki.czechidm.com/ 2026-05-08T03:25:31+00:00 https://wiki.czechidm.com/ https://wiki.czechidm.com/_media/wiki/logo.png text/html 2026-01-21T09:14:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_reports/reports/sql_universal_report?rev=1768986853&do=diff Modul of reports: SQL Universal report (installation guide) Since 3.0.0 version tagy: Modul report reports reportů Report name:sql-universal-report This report will report an entire database table/view or data based on a custom SQL query. Only a user with superadmin permission can execute this report text/html 2025-08-12T12:01:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_ntf?rev=1755000061&do=diff topic module notifications sms email notification idm-ntf Modules - Notification [ntf] paid The notification module contains a simplified mechanism for notification configuration. It helps the administrator with: * define events that should trigger a notification (for example, changes on a user), * define rules text/html 2025-08-21T20:41:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/security/dev/authorization?rev=1755808879&do=diff Authorization policies security authorization role policy default user role permissions An authorization policy determines which permissions a user in CzechIdM has. A policy is assigned to a role and everyone with this role gains the permissions determined by the policy as well. * assigning permissions in CzechIdM via ordinary roles enables managing permissions for CzechIdM by a standard mechanism text/html 2021-08-09T10:53:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/uniform_password/password_filter_dll?rev=1628506416&do=diff synchronization password filter passwordfilter active directory ad dll Password filter - dll library What purpose does it serve to? Password filter is a useful Active Directory extension which provides a manner for common MS Windows users to change their password by a standard way such as (ctrl + alt + del) and have this new password propagated to IdM. Depending on the IdM configuration, the new password may be propagated into other related systems and thus maintain unified password on them.… text/html 2018-03-23T10:00:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/architecture/dev/modularity?rev=1521799214&do=diff Modularity modularity frontend backend architecture installation Backend After discussing the topic, Spring Plugin was chosen as a framework for ensuring backend modularity. Compared to other considered frameworks such as OSGi or Microservices, it is the simplest option based on interfaces, their implementations and registration of these implementations for their use in the application. The accepted disadvantage is application server restart after installing a module (module = text/html 2024-06-20T08:14:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_tool?rev=1718871293&do=diff Modules - SCIM [scim] Documentation Modules - Compliance [comp] idmtool tool Modules - Tool [tool] Source documentation on Github. ## Features - Release product version - release product under final version, new development version will be set, tag will be prepared. - Release module version - release module under final version, new development version will be set, tag will be prepared. - Change product version - set version for all modules. - Get product version - for test reasons only. - Bu… text/html 2024-01-09T08:27:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/quickstart/dev/ide/eclipse?rev=1704788839&do=diff Eclipse ide Configuration quickstart for developing CzechIdM in Eclipse. Install Eclipse Download the last stable version of Eclipse from Eclipse download page. When running the installer, choose "IDE for Java EE Developers". It is advised to download Eclipse directly from download page, since when installing from distribution repositories via dnf or yum, you are not able to choose from distinct Eclipse editions. text/html 2026-02-12T15:15:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_bsc?rev=1770909320&do=diff Modules - Business cards [bsc] This module will give you the possibility to create business cards for users in IdM. Business cards are generated as PDF. Data for this document must be saved in IdM. It doesn't matter where the data are saved. You have the option to create business card from basic identity attribute, EAV, contract attribute, etc. text/html 2025-10-20T08:29:32+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_tech?rev=1760948972&do=diff account technical module technical_account idm-tech Modules - Technical accounts [tech] paid The Technical Accounts module in Identity Management (IdM) is designed to help manage accounts that are not tied to a specific user identity, but instead serve a technical or system purpose. These accounts – often referred to as text/html 2025-09-01T09:05:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/systems/winrm_ad_connector?rev=1756717558&do=diff WinRM + AD Connector This connector is combining WinRM and AD connector into one. The main advantage of this is you can execute operation by AD connector or by WinRM connector or with both together in specified order. General information Typical use cases for this combined connector are: text/html 2021-02-22T19:59:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/confidential_storage?rev=1614023993&do=diff Confidential storage confidential security configuration To save sensitive data, a confidential storage solution has been created in the application. To read the data from this storage, one needs to know its owner (entity), and the key. The storage is currently used for: * saving the sensitive data in text/html 2026-05-03T22:16:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_rec_15?rev=1777846609&do=diff idm15 recertification module idm-rec workflows Modules - Recertification Modules - Recertification (IdM 15+) [rec] paid The Recertification module in Identity Management (IdM) gives the ability to perform regularly scheduled, or individual recertification requests of assigned permissions in IdM. The recertification requests will initiate an approval process at the end of which, the permissions are either retained (recertified) or removed as no longer needed. This increases the overall security l… text/html 2024-12-18T09:10:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/systems/connectors/remote_server?rev=1734513008&do=diff Remote connector server system connector configuration <https://doc.czechidm.com/doc-admin-guide/1.3/connector-server.html> Remote connector server is a standalone daemon used for interfacing some of the more difficult systems. You deploy connector bundles into the connector server. Then, you configure CzechIdM to use connectors from within the remote connector server. As far as IdM is concerned, there is no difference if actions on end system are performed by connector server or IdM itself. Th… text/html 2018-11-28T07:00:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/quickstart/dev/frontend?rev=1543388426&do=diff Quickstart - frontend Frontend module is single npm packace with standard package.json descriptor and CzechIdM module descriptor: package.json { "name": "czechidm-example", "version": "7.3.0", "description": "Example module for CzechIdM devstack. This module can be duplicated and rename for create new optional CzechIdM module.", "main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "keywords": [ "CzechIdM", "example", "IdM" … text/html 2022-01-20T15:02:09+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/openam?rev=1642690929&do=diff Modules - OpenAM: Admin guide When the module is enabled in the CzechIdM, users can authenticate to CzechIdM with their login and password valid for OpenAM. Or they may be authenticated by Single-Sign-On when they already have valid OpenAM session. text/html 2021-06-28T11:13:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/wizards/ad_group?rev=1624878784&do=diff Microsoft Active Directory (MS AD) wizard for groups msad ms wizard groups The main importance of wizards is to simplify the work of the user, so as to avoid complicated entering values and possibly to avoid common mistakes. System wizards are used primarily to create a new system connected to a given external system. The first step is to select the connector you want to use for the connection. text/html 2026-01-21T14:02:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/systems/dev/scripted-jdbc-connector?rev=1769004156&do=diff Using Scripted JDBC connector jdbc connector Configuration The configuration is done using standard JDBC setting, i.e. setting a proper URL template, JDBC driver etc. We are mainly interested in configuring the CRUD operation scripts. You can either: * set script path on filesystem (recommended) text/html 2021-06-25T08:02:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/wizards/ad_user?rev=1624608140&do=diff Microsoft Active Directory (MS AD) wizard for users msad ms wizard The main importance of wizards is to simplify the work of the user, so as to avoid complicated entering values and possibly to avoid common mistakes. System wizards are used primarily to create a new system connected to a given external system. The first step is to select the connector you want to use for the connection. text/html 2019-03-01T07:54:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/notifications?rev=1551426894&do=diff Security Documentation Application configuration Notifications CzechIdM allows sending messages to users. There are several types of notifications in CzechIdM: * Emails – The most common way of communication, it only requires an available SMTP server. * Websocket – A modern communication protocol used for communication between the web browser (user) and the web server. In CzechIdM, it is used for displaying of informational or warning notices directly in the web browser of a logged-in user.… text/html 2022-12-21T09:28:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/synchronization/dev/relation-sync?rev=1671614911&do=diff Synchronization - contractual relationship sync relationship contract Identity (contractual) relationship synchronization What is contractual relationship contractual relationshipTypically one contractual relationship is equals to one contract in company for the identity. Actions after end of sync not executed text/html 2020-04-06T18:25:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/synchronization/dev/contract-slice-sync?rev=1586197553&do=diff Synchronization - time slices of contractual relationship sync contract slice The synchronization of time slices of identity's (contractual) relationshipSynchronization of contract sliceValid till date What is the time slice of contractual relationship Typically one contractual relationship is equal to one contract in company for the identity. One slice of the contractual relationship describes what the contract looked like in a specific time slot, i. e., it is a snapshot of the contract at a … text/html 2020-02-26T11:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/transformation_scripts?rev=1582717782&do=diff Provisioning Documentation Scheduled tasks Transformation scripts Often, CzechIdM transform data from source system to managed system. For example CzechIdM wants to fill Active Directory's attribute diplayName that is of format <firstName + LastName>. CzechIdM offers using a transformation script during text/html 2021-02-22T20:21:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/security/dev/confidential-storage?rev=1614025305&do=diff Confidential storage confidential security configuration To save sensitive data, the interface ConfidentialStorage has been created in the application. To read the data from the storage, it is necessary to know its owner (entity), and the key. The storage is currently used for: * saving the sensitive data in text/html 2020-03-22T21:12:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_pwd?rev=1584911522&do=diff Modules: openAM authentication Documentation Modules: virtual systems Modules - Password reset [pwd-reset] The module provides the functionality of password reset or, in other words, the recovery of a forgotten password. [ Password reset process] Process of restoring your forgotten password User can start the process on CzechIdM login page where is a "Forgotten password" link. In the next step, user is required to enter the account identifier. For now, identity email or login are supported… text/html 2019-03-04T14:00:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/architecture?rev=1551708054&do=diff Architecture frontend architecture The application is divided into 2 technological lines: backend (java) and frontend (javascript). There is a REST interface between the two. Minimum executable application The minimal executable application always contains the app + core modules. text/html 2020-03-23T19:08:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/eav?rev=1584990490&do=diff Organization structure Documentation Systems Extended attributes (EAV) Entities (Identities, Roles...) in CzechIdM contain a set of basic attributes that can deal with most of the general situations. However, due to the fact, that the implementation needs vary, it often happens that there are not enough basic attributes. Therefore, the so-called extended attributes (EAV) can be added to important entities in the text/html 2020-03-22T21:14:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_openam?rev=1584911646&do=diff Modules - User registration [reg] Documentation Modules: password reset [pwd-reset] Modules - OpenAM authentication [openam] The module enables Single-Sign-On and authentication against OpenAM for CzechIdM. It also provides a REST endpoint for retrieving users' OpenAM attributes, e.g. uid, dn, destinationindicator. Authentication process text/html 2020-03-22T21:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_scim?rev=1584911344&do=diff Modules - SMS [sms] Documentation Modules - Tool [tool] scim Modules - SCIM [scim] "scim" module exposes interface in CzechIdM by the SCIM 2.0 specification. Thus CzechIdM can be - as a server - connected to clients that implement SCIM 2.0 via its public API. [ SCIM module] More about general SCIM specification - model, operations and endpoints. Read more Admin tutorials * text/html 2019-06-12T13:21:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_vs?rev=1560345686&do=diff Modules: password reset Documentation Modules: Reports Modules - Virtual systems [vs] What is a virtual system A virtual system is a type of system that is not directly connected for online management. IdM "knows" what accounts and permissions the user should have on the virtual system, but on the real system this is executed by the text/html 2021-07-16T12:18:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/wizards/table?rev=1626437896&do=diff Database table wizard The main importance of wizards is to simplify the work of the user, so as to avoid complicated entering values and possibly to avoid common mistakes. System wizards are used primarily to create a new system connected to a given external system. The first step is to select the connector you want to use for the connection.