https://wiki.czechidm.com/ 2026-05-08T03:23:18+00:00 https://wiki.czechidm.com/ https://wiki.czechidm.com/_media/wiki/logo.png text/html 2026-01-21T09:14:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_reports/reports/sql_universal_report?rev=1768986853&do=diff Modul of reports: SQL Universal report (installation guide) Since 3.0.0 version tagy: Modul report reports reportů Report name:sql-universal-report This report will report an entire database table/view or data based on a custom SQL query. Only a user with superadmin permission can execute this report text/html 2022-12-20T10:11:43+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/czechidm_installation?rev=1671531103&do=diff Installation of CzechIdM - Linux - CentOS8 installation jdbc quickstart encryption We expect that the server is prepared as described in Server preparation - Linux - CentOS8. This tutorial shows how to install full production-ready version of CzechIdM on standard software setup (Java, PostgreSQL, Tomcat, Apache HTTPd). If you are looking for a demo installation please see text/html 2021-12-14T08:53:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/czechidm_installation_win?rev=1639472028&do=diff Installation of CzechIdM - Windows installation jdbc quickstart encryption We presume that the server is prepared as described in Server preparation - Windows. This tutorial shows how to install full production-ready version of CzechIdM on standard software setup (java, postgreSQL, Tomcat, Apache httpd). If you are looking for a demo installation please see text/html 2026-02-19T12:39:47+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/dev/creating_a_development_environment?rev=1771504787&do=diff Creating a development environment This text is intended as a tutorial for CzechIdM developers with the goal to set up IDE, build CzechIdM in it and run the system. If you prefer quick glance at the code or need to start quickly, you can use Quick start with devstack. 1. Install Java and Maven text/html 2025-07-22T08:47:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/installation_script_-_centos?rev=1753174020&do=diff Installation script for CzechIdM About script The script was developed to make it easier for developers to prepare server and install CzechIdM. This script replaces tutorials Server preparation and Install CzechIdM. Make sure that your server is running on CentOS. Otherwise, you need to use a different tutorial. text/html 2021-08-09T10:53:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/uniform_password/password_filter_dll?rev=1628506416&do=diff synchronization password filter passwordfilter active directory ad dll Password filter - dll library What purpose does it serve to? Password filter is a useful Active Directory extension which provides a manner for common MS Windows users to change their password by a standard way such as (ctrl + alt + del) and have this new password propagated to IdM. Depending on the IdM configuration, the new password may be propagated into other related systems and thus maintain unified password on them.… text/html 2025-08-12T12:01:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_ntf?rev=1755000061&do=diff topic module notifications sms email notification idm-ntf Modules - Notification [ntf] paid The notification module contains a simplified mechanism for notification configuration. It helps the administrator with: * define events that should trigger a notification (for example, changes on a user), * define rules text/html 2018-03-23T10:00:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/architecture/dev/modularity?rev=1521799214&do=diff Modularity modularity frontend backend architecture installation Backend After discussing the topic, Spring Plugin was chosen as a framework for ensuring backend modularity. Compared to other considered frameworks such as OSGi or Microservices, it is the simplest option based on interfaces, their implementations and registration of these implementations for their use in the application. The accepted disadvantage is application server restart after installing a module (module = text/html 2024-06-20T08:14:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_tool?rev=1718871293&do=diff Modules - SCIM [scim] Documentation Modules - Compliance [comp] idmtool tool Modules - Tool [tool] Source documentation on Github. ## Features - Release product version - release product under final version, new development version will be set, tag will be prepared. - Release module version - release module under final version, new development version will be set, tag will be prepared. - Change product version - set version for all modules. - Get product version - for test reasons only. - Bu… text/html 2024-01-09T08:27:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/quickstart/dev/ide/eclipse?rev=1704788839&do=diff Eclipse ide Configuration quickstart for developing CzechIdM in Eclipse. Install Eclipse Download the last stable version of Eclipse from Eclipse download page. When running the installer, choose "IDE for Java EE Developers". It is advised to download Eclipse directly from download page, since when installing from distribution repositories via dnf or yum, you are not able to choose from distinct Eclipse editions. text/html 2024-01-10T10:38:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/server_preparation_win?rev=1704883100&do=diff Server preparation - Windows installation java tomcat quickstart apache_httpd This tutorial shows you how to prepare the server for test or production use of CzechIdM. If you are looking for a much quicker way of installing CzechIdM, use the demo setup described here Getting Started Basic system setup * 1 server (can be virtualized) for everything: backend, frontend and database. text/html 2021-03-30T12:13:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/mssql_database_support?rev=1617106402&do=diff MsSQL: Run CzechIdM with MsSQL database sqlserver sql mssql install database supported drivers The tutorial describes how to run CzechIdM with a Microsoft SQL Server. When following the tutorials Server preparation and CzechIdM installation please do skip all the settings and setup related to database. Don't forget ---------- ---------- text/html 2024-08-12T11:29:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/modules_pwdreset?rev=1723462143&do=diff Modules - pwd-reset: How to reset forgotten password? This module provides the functionality of password reset or, in other words, the recovery of a forgotten password. How to allow password reset in CAS? For CAS docker set env variables: - CAS_CUSTOM_FRONTEND_PASSWORDRESET_DISPLAY=true - CAS_CUSTOM_FRONTEND_PASSWORDRESET_LINK=<idm url>/\#/password-reset # IMPORTANT: don't forget to escape characters like # text/html 2025-10-20T08:29:32+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_tech?rev=1760948972&do=diff account technical module technical_account idm-tech Modules - Technical accounts [tech] paid The Technical Accounts module in Identity Management (IdM) is designed to help manage accounts that are not tied to a specific user identity, but instead serve a technical or system purpose. These accounts – often referred to as text/html 2020-02-17T14:34:18+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/server_os_updates?rev=1581950058&do=diff Server updates - OS updates To ensure secure operation, servers in the infrastructure have to be kept up to date. This tutorial addresses the need for OS updates of the IdM server and gives basic guidelines and recommendations. Update strategy Each organization has some sort of schedule to apply text/html 2020-03-20T10:13:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/backups?rev=1584699225&do=diff Server preparation - Backup and Recovery When it comes to backup, the CzechIdM deployments consists of three parts: * Identity manager's data in the PostgreSQL database. * Application's idm.war archive in the Tomcat. * Configuration folders under text/html 2026-02-12T15:15:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_bsc?rev=1770909320&do=diff Modules - Business cards [bsc] This module will give you the possibility to create business cards for users in IdM. Business cards are generated as PDF. Data for this document must be saved in IdM. It doesn't matter where the data are saved. You have the option to create business card from basic identity attribute, EAV, contract attribute, etc. text/html 2025-09-01T09:05:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/systems/winrm_ad_connector?rev=1756717558&do=diff WinRM + AD Connector This connector is combining WinRM and AD connector into one. The main advantage of this is you can execute operation by AD connector or by WinRM connector or with both together in specified order. General information Typical use cases for this combined connector are: text/html 2026-04-07T07:54:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial?rev=1775548488&do=diff IdStory administration tutorials: * Accounts - create multiple personal accounts * Accounts - working with objects on connected systems * Add System Account Attributes to Technical Account Report * API - Requirements for a system to be connected * Assign roles to accounts - Import of data from CSV (since 5.5.0) * Assign roles to contract EAV - Import of data from CSV * Audit * Audit - Reading audit information * Audit - Workflow history * Automatic role definitions - Import all rules … text/html 2026-01-07T09:49:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/czechidm_installation_finalize?rev=1767779355&do=diff Installation of CzechIdM - Final steps installation quickstart configuration userrole email We presume that CzechIdM is already installed as described in Installation of CzechIdM - Linux - CentOS8 or Installation of CzechIdM - Windows. This tutorial contains some recommended steps to review and finalize the configuration for the production-ready version of CzechIdM. Systems & Virtual systems text/html 2024-01-10T10:35:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/server_preparation?rev=1704882946&do=diff Server preparation - Linux - CentOS8 installation java tomcat quickstart apache_httpd This tutorial shows how to prepare the server for test or production use of CzechIdM. If you are looking for much quicker way of how to start the CzechIdM, use the demo setup described here Getting Started Basic system setup text/html 2020-12-15T17:22:51+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/server_tomcat_updates?rev=1608052971&do=diff Server updates - Apache Tomcat updates This tutorial shows how you can update the Apache Tomcat in your CzechIdM deployment. In this particular howto we are updating from Tomcat 8.5.11 to Tomcat 8.5.50. If necessary, adjust performed commands to your needs. text/html 2022-04-12T08:39:47+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/caw_driver?rev=1649752787&do=diff The CAW driver The CAW driver is our native certificate authority driver. In essence, it is a shell script encompassing ordinary OpenSSL certificate authority. This has many pros: * If you can do it in openssl.cnf, you can do it in CAW too. * Supported on any Linux/UNIX platform which has openssl, bash and coreutils. Also supported on MinGW. text/html 2026-02-06T12:02:47+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/notifications_standard?rev=1770379367&do=diff Notifications - Configure standard notifications This chapter contains a list of important notifications (topics) available in CzechIdM, especially those sent by email. creating a new approval task is not sentCheck Topic Channel Note / usage CHECK acc:newPassword text/html 2024-02-21T11:59:35+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/manage_ad_wizard?rev=1708516775&do=diff Systems - AD: Manage users - Wizard Introduction This manual is written for CzechIdM version 10.8 LTS. If you have older version, update it first. Notes about issues when you use older version is described in section wizard in CzechIdM version 10.7.x You can also use instructions text/html 2021-02-22T19:59:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/confidential_storage?rev=1614023993&do=diff Confidential storage confidential security configuration To save sensitive data, a confidential storage solution has been created in the application. To read the data from this storage, one needs to know its owner (entity), and the key. The storage is currently used for: * saving the sensitive data in text/html 2021-07-29T14:17:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/postgres_upgrade_tutorial?rev=1627568277&do=diff Upgrading PostgreSQL 9.2 to 9.6 This is a tutorial for upgrading PostgreSQL database on CentOS 7 server. Upgrading your database is necessary to have it properly patched, secure and to have all DB features your applications need. Upgrade process in this article installs another PostgreSQL engine alongside the old one and migrates data. Since original data are untouched during the upgrade, this howto is also suitable for production deployments. text/html 2022-01-20T15:02:09+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/openam?rev=1642690929&do=diff Modules - OpenAM: Admin guide When the module is enabled in the CzechIdM, users can authenticate to CzechIdM with their login and password valid for OpenAM. Or they may be authenticated by Single-Sign-On when they already have valid OpenAM session. text/html 2021-01-07T19:07:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/application_configuration?rev=1610046445&do=diff Configuration - CzechIdM configuration in GUI and config files CzechIdM can be configured by many configuration properties, see the list of configuration items. You can set the properties in two ways: * - these properties are persisted to the CzechIdM database and they are preferred over the properties in configuration files. This is most handy place to put your configuration that differs from product defaults, but note that it's not accessible when CzechIdM is down. text/html 2024-01-10T10:57:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/getting-started?rev=1704884273&do=diff Getting Started tutorial installation An overview of CzechIdM, how to download it, setup and use in a presentation environment. GUI server preparation guideinstallation tutorial Requirements * Java 11 (Java 21 for CzechIdM 13.1.0+) * Windows or Unix/Linux operating system or Mac OS * Web browser Firefox, Chrome, Edge text/html 2024-12-18T09:10:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/systems/connectors/remote_server?rev=1734513008&do=diff Remote connector server system connector configuration <https://doc.czechidm.com/doc-admin-guide/1.3/connector-server.html> Remote connector server is a standalone daemon used for interfacing some of the more difficult systems. You deploy connector bundles into the connector server. Then, you configure CzechIdM to use connectors from within the remote connector server. As far as IdM is concerned, there is no difference if actions on end system are performed by connector server or IdM itself. Th… text/html 2018-11-28T07:00:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/quickstart/dev/frontend?rev=1543388426&do=diff Quickstart - frontend Frontend module is single npm packace with standard package.json descriptor and CzechIdM module descriptor: package.json { "name": "czechidm-example", "version": "7.3.0", "description": "Example module for CzechIdM devstack. This module can be duplicated and rename for create new optional CzechIdM module.", "main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "keywords": [ "CzechIdM", "example", "IdM" … text/html 2026-05-03T22:16:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_rec_15?rev=1777846609&do=diff idm15 recertification module idm-rec workflows Modules - Recertification Modules - Recertification (IdM 15+) [rec] paid The Recertification module in Identity Management (IdM) gives the ability to perform regularly scheduled, or individual recertification requests of assigned permissions in IdM. The recertification requests will initiate an approval process at the end of which, the permissions are either retained (recertified) or removed as no longer needed. This increases the overall security l… text/html 2021-06-28T11:13:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/wizards/ad_group?rev=1624878784&do=diff Microsoft Active Directory (MS AD) wizard for groups msad ms wizard groups The main importance of wizards is to simplify the work of the user, so as to avoid complicated entering values and possibly to avoid common mistakes. System wizards are used primarily to create a new system connected to a given external system. The first step is to select the connector you want to use for the connection. text/html 2020-06-22T16:52:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/modules_openam?rev=1592844776&do=diff Modules - OpenAM: installation and configuration This tutorial will help you easily install and configure the OpenAM module for CzechIdM. To read more about the module, please see OpenAM module documentation. Installation Download the idm-openam module distribution package. The package contains a backend folder. Your IdM Tomcat installation we call IDM in the following example. text/html 2020-04-01T16:21:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/centos8_installation?rev=1585758081&do=diff CentOS 8 installation for IdM Reason for this tutorial is that when we were installing 3 times minimal CentOS we ended up with 3 different installations. This guide was created to have one standard OS for IdM which is the best system installation for IdM. System requirements for IdM server are text/html 2020-06-30T12:27:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/server_monitoring?rev=1593520074&do=diff Server preparation - Server monitoring Automatic monitoring of production system is crucial for bussiness continuity. Monitoring is recommended also for the testing environment, but it is not mandatory. This page will show you how to set up basic monitoring of server with CzechIdM using Nagios NRPE. It is very useful to store monitored values for trend overview (e.g. with Munin). Some monitoring systems (like Zabbix) can store trends and monitor services at once. It is also practical to install text/html 2026-01-21T14:02:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/systems/dev/scripted-jdbc-connector?rev=1769004156&do=diff Using Scripted JDBC connector jdbc connector Configuration The configuration is done using standard JDBC setting, i.e. setting a proper URL template, JDBC driver etc. We are mainly interested in configuring the CRUD operation scripts. You can either: * set script path on filesystem (recommended) text/html 2018-01-29T08:57:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/dev/quick_start_with_devstack?rev=1517216269&do=diff Quick start with devstack When you want to try start explore CzechIdM from developer view and you don't have enough free time, is possible use our Docker with setup all necessary applications and service. Docker url: https://hub.docker.com/r/bcvsolutions/czechidm-dev/. Using this Docker container is very simple. text/html 2021-06-25T08:02:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/wizards/ad_user?rev=1624608140&do=diff Microsoft Active Directory (MS AD) wizard for users msad ms wizard The main importance of wizards is to simplify the work of the user, so as to avoid complicated entering values and possibly to avoid common mistakes. System wizards are used primarily to create a new system connected to a given external system. The first step is to select the connector you want to use for the connection. text/html 2020-11-04T08:29:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/modules_scim_installation?rev=1604478578&do=diff Modules - SCIM: module installation Dependencies We are using a third party library scim2-sdk-common under LGPLv2 license. This library contains very useful DTOs (scim standard resources) and filter parser. Rest endpoints are exposed by our devstack. Module can be installed both ways: text/html 2024-10-30T14:23:30+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/faq/hw_requirements_for_standalone_application?rev=1730298210&do=diff Hw requirements for standalone application Installing IdM on prepared OS - deprecated way before IdStory Appliance Use <https://wiki.czechidm.com/faq/prerequisites_and_system_requirements> The following hw requirements are valid if you are installing all components CzechIdM and databaserver on a single server. Typical configuration text/html 2025-11-03T11:00:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/transformation_scripts?rev=1762167608&do=diff Transformation scripts - library and usage Assuming you'd connected a managed system or source system to CzechIdM, prepared synchronization or provisioning with some attribute mappings (e.g. identity), you may then have several attributes that differ in format between the source and the managed system. For instance, you want to fill an Active Directory's attribute text/html 2024-01-09T08:28:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/dev/build_backend?rev=1704788929&do=diff Build CzechIdM Backend Requirements Install OpenJDK 11 (OpenJDK 21 for CzechIdm 13.1.0+). Install Maven. - Required version is 3.1 or higher Install Tomcat 9.0.*. Tested versions: 9.0.80 Modules Project modules [mandatory] * parent Maven parent of all following submodules with common dependencies text/html 2025-08-21T20:41:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/security/dev/authorization?rev=1755808879&do=diff Authorization policies security authorization role policy default user role permissions An authorization policy determines which permissions a user in CzechIdM has. A policy is assigned to a role and everyone with this role gains the permissions determined by the policy as well. * assigning permissions in CzechIdM via ordinary roles enables managing permissions for CzechIdM by a standard mechanism text/html 2019-03-01T07:54:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/notifications?rev=1551426894&do=diff Security Documentation Application configuration Notifications CzechIdM allows sending messages to users. There are several types of notifications in CzechIdM: * Emails – The most common way of communication, it only requires an available SMTP server. * Websocket – A modern communication protocol used for communication between the web browser (user) and the web server. In CzechIdM, it is used for displaying of informational or warning notices directly in the web browser of a logged-in user.… text/html 2022-04-05T14:53:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/vema_cloud?rev=1649170435&do=diff Systems - VEMA: Synchronization You may have VEMA installed locally or in the cloud. The basic principals of integration of VEMA and VEMA Cloud with CzechIdM are very similar or the same. In both cases we will use an external MS-SQL database "Interchange" to store the data from VEMA which will be read by CzechIdM. We will also need a server with the VEMA thick client installed. text/html 2024-09-26T11:24:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/eng_installation_package?rev=1727349841&do=diff Installation packages IdStory Implemented processes * Identity lifecycle management * Identity synchronization + job contracts synchronization * Standardise process of password delivery - sending an email to a user when creating an account in AD / LDAP / DB. text/html 2022-12-21T09:28:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/synchronization/dev/relation-sync?rev=1671614911&do=diff Synchronization - contractual relationship sync relationship contract Identity (contractual) relationship synchronization What is contractual relationship contractual relationshipTypically one contractual relationship is equals to one contract in company for the identity. Actions after end of sync not executed text/html 2020-02-26T11:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/transformation_scripts?rev=1582717782&do=diff Provisioning Documentation Scheduled tasks Transformation scripts Often, CzechIdM transform data from source system to managed system. For example CzechIdM wants to fill Active Directory's attribute diplayName that is of format <firstName + LastName>. CzechIdM offers using a transformation script during text/html 2020-04-06T18:25:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/synchronization/dev/contract-slice-sync?rev=1586197553&do=diff Synchronization - time slices of contractual relationship sync contract slice The synchronization of time slices of identity's (contractual) relationshipSynchronization of contract sliceValid till date What is the time slice of contractual relationship Typically one contractual relationship is equal to one contract in company for the identity. One slice of the contractual relationship describes what the contract looked like in a specific time slot, i. e., it is a snapshot of the contract at a … text/html 2021-02-22T20:21:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/security/dev/confidential-storage?rev=1614025305&do=diff Confidential storage confidential security configuration To save sensitive data, the interface ConfidentialStorage has been created in the application. To read the data from the storage, it is necessary to know its owner (entity), and the key. The storage is currently used for: * saving the sensitive data in text/html 2020-03-22T21:12:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_pwd?rev=1584911522&do=diff Modules: openAM authentication Documentation Modules: virtual systems Modules - Password reset [pwd-reset] The module provides the functionality of password reset or, in other words, the recovery of a forgotten password. [ Password reset process] Process of restoring your forgotten password User can start the process on CzechIdM login page where is a "Forgotten password" link. In the next step, user is required to enter the account identifier. For now, identity email or login are supported… text/html 2019-03-04T14:00:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/adm/architecture?rev=1551708054&do=diff Architecture frontend architecture The application is divided into 2 technological lines: backend (java) and frontend (javascript). There is a REST interface between the two. Minimum executable application The minimal executable application always contains the app + core modules. text/html 2025-10-21T14:14:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/management_of_exchange?rev=1761056054&do=diff Systems - Exchange: accounts management Microsoft Exchange Server is a mail server and calendaring server running exclusively on Windows Server operating systems. Thanks to WinRM + AD connector we can manage Exchange. Connector supports these operations in Exchange: text/html 2020-12-01T21:34:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/home_dirs?rev=1606858441&do=diff Systems - Home Directory Home directory is a file system directory on a multi-user operating system containing files for a given user of the system. Thanks to WinRM + AD connector we can manage Home Directories. Connector supports these operations with Home Directories: text/html 2020-03-23T19:08:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/eav?rev=1584990490&do=diff Organization structure Documentation Systems Extended attributes (EAV) Entities (Identities, Roles...) in CzechIdM contain a set of basic attributes that can deal with most of the general situations. However, due to the fact, that the implementation needs vary, it often happens that there are not enough basic attributes. Therefore, the so-called extended attributes (EAV) can be added to important entities in the text/html 2020-03-22T21:14:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_openam?rev=1584911646&do=diff Modules - User registration [reg] Documentation Modules: password reset [pwd-reset] Modules - OpenAM authentication [openam] The module enables Single-Sign-On and authentication against OpenAM for CzechIdM. It also provides a REST endpoint for retrieving users' OpenAM attributes, e.g. uid, dn, destinationindicator. Authentication process text/html 2025-07-07T13:02:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/technical_accounts?rev=1751893374&do=diff Module - Technical Accounts Modul Technické účty slouží k zakládání, správě a automatizaci technických účtů v systému. Umožňuje vytvářet technické účty, nastavovat jim trvalá hesla a automaticky vyplňovat základní atributy podle předem definovaných pravidel. text/html 2020-12-01T21:32:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/systems_-_management_of_distribution_groups?rev=1606858369&do=diff Systems - MS AD and MS Exchange: Management of Distribution Groups Distribution group are intended to be used solely as email distribution lists in applications like MS Exchange or OutLook. The group is created with New-DistributionGroup command in Exchange Management Shell. Thanks to WinRM + AD connector we can manage Distribution Groups. text/html 2020-03-22T21:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_scim?rev=1584911344&do=diff Modules - SMS [sms] Documentation Modules - Tool [tool] scim Modules - SCIM [scim] "scim" module exposes interface in CzechIdM by the SCIM 2.0 specification. Thus CzechIdM can be - as a server - connected to clients that implement SCIM 2.0 via its public API. [ SCIM module] More about general SCIM specification - model, operations and endpoints. Read more Admin tutorials * text/html 2019-06-12T13:21:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/modules_vs?rev=1560345686&do=diff Modules: password reset Documentation Modules: Reports Modules - Virtual systems [vs] What is a virtual system A virtual system is a type of system that is not directly connected for online management. IdM "knows" what accounts and permissions the user should have on the virtual system, but on the real system this is executed by the text/html 2025-10-07T10:28:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/adm/configuration_-_winrm?rev=1759832922&do=diff Configuration of WinRM In this tutorial we will go through configuration of WinRM which is necessary for using WinRM connector It will cover configuration which we tested on multiple servers together with our connector. It cover just the basic stuff and if you want to study more about this topic you can use official documentation or 3rd party tutorials which will go deeper. text/html 2017-11-04T23:33:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/tutorial/dev/button_changes_color_if_filter_is_used?rev=1509838414&do=diff Button - Implementing responsive filter button Description When we have filled some information in filter table than button with label “Filter” in top right corner changes its color to light blue instead of gray. It will help us recognize if the table below have all data we need and no filter is set. text/html 2021-07-16T12:18:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.czechidm.com/devel/documentation/wizards/table?rev=1626437896&do=diff Database table wizard The main importance of wizards is to simplify the work of the user, so as to avoid complicated entering values and possibly to avoid common mistakes. System wizards are used primarily to create a new system connected to a given external system. The first step is to select the connector you want to use for the connection.