IdStory Identity Manager

Remote connector server

Anonymous (anonymous@undisclosed.example.com) — 2024-12-18T09:10:08+00:00

Remote connector server system connector configuration Remote connector server is a standalone daemon used for interfacing some of the more difficult systems. You deploy connector bundles into the connector server. Then, you configure CzechIdM to use connectors from within the remote connector server. As far as IdM is concerned, there is no difference if actions on end system are performed by connector server or IdM itself. Th…

Configuration - backend

Anonymous (anonymous@undisclosed.example.com) — 2026-03-12T13:45:39+00:00

Configuration - backend configuration final property properties config setup The application uses a Spring boot configuration in the application.properties files. All the configuration items which are used solely for idm begin with idm. prefix. The configuration items from the file can be overloaded through a setting agenda in the gui ⇒ a server restart isn't needed for changing the configuration with

WinRM + AD Connector

Anonymous (anonymous@undisclosed.example.com) — 2025-09-01T09:05:58+00:00

WinRM + AD Connector This connector is combining WinRM and AD connector into one. The main advantage of this is you can execute operation by AD connector or by WinRM connector or with both together in specified order. General information Typical use cases for this combined connector are:

Tasks scheduler

Anonymous (anonymous@undisclosed.example.com) — 2025-06-04T08:43:28+00:00

Tasks scheduler scheduler final lrt long running task description triggers cron scheduled The task can be scheduled in three different ways - types of triggers: * Settled time - will enter a settled launching time If the time was entered in the past, then the task is launched right away. * Cron - Quartz expression * Dependent task - trigger task, when other task successfully ended. Dependent tasks are executed by

Modules - Tool [tool]

Anonymous (anonymous@undisclosed.example.com) — 2024-06-20T08:14:53+00:00

Modules - SCIM [scim] Documentation Modules - Compliance [comp] idmtool tool Modules - Tool [tool] Source documentation on Github. ## Features - Release product version - release product under final version, new development version will be set, tag will be prepared. - Release module version - release module under final version, new development version will be set, tag will be prepared. - Change product version - set version for all modules. - Get product version - for test reasons only. - Bu…

API documentation (Swagger)

Anonymous (anonymous@undisclosed.example.com) — 2023-10-19T10:46:44+00:00

API documentation (Swagger) documentation We use swagger specification for RESTful API documentation with tools: * Swagger UI - visualize and interact with the API’s resources. It is available at IdM backend url /idm-backend/api. * Swagger2Markup - generation of an up-to-date RESTful API documentation by combining documentation that’s been hand-written with auto-generated

Modul of reports: SQL Universal report (installation guide)

Anonymous (anonymous@undisclosed.example.com) — 2026-01-21T09:14:13+00:00

Modul of reports: SQL Universal report (installation guide) Since 3.0.0 version tagy: Modul report reports reportů Report name:sql-universal-report This report will report an entire database table/view or data based on a custom SQL query. Only a user with superadmin permission can execute this report

How to write scripts for WinRM + AD Connector

Anonymous (anonymous@undisclosed.example.com) — 2021-11-29T13:39:58+00:00

How to write scripts for WinRM + AD Connector This page main purpose is to inform developers how to write python and powershell script for our WinRM + AD Connector Before you start with scripts it's good to know how this connector is working and what is his purpose so please follow the link above a read some information about the connector.

CzechIdM Features

Anonymous (anonymous@undisclosed.example.com) — 2026-02-12T14:07:59+00:00

CzechIdM Features Provisioning and automated synchronization What would CzechIdM be without automation? Synchronization, i.e. data flow from source systems to the identity manager, is essential for every identity manager. In CzechIdM you can synchronize the following types of entities:

Events - processing of events

Anonymous (anonymous@undisclosed.example.com) — 2019-05-13T08:49:54+00:00

Events - processing of events An event mechanism has been designed to make extending and overlapping of the CzechIdM core functionality within any module possible. The event (EntityEvent) with type (EventType) is published via EntityEventManager from different places in the application (

Events - processing of events

Anonymous (anonymous@undisclosed.example.com) — 2021-08-13T07:18:42+00:00

Events - processing of events event architecture configuration processor An event mechanism has been designed to make extending and overlapping of the CzechIdM core functionality within any module possible. The event (EntityEvent) with type (EventType) is published via EntityEventManager from different places in the application (

Init application and data

Anonymous (anonymous@undisclosed.example.com) — 2024-05-28T12:24:29+00:00

Init application and data event demo init data processor @since 10.5.0 Application init data are checked and created (updated), when application is started. Init data contains product provided roles, form definitions, value generators, password policies, codelist, scheduled task etc. to cover basic CzechIdM usage right after application is instaled or updated.

Database scripts (Flyway)

Anonymous (anonymous@undisclosed.example.com) — 2018-11-15T09:40:37+00:00

Database scripts (Flyway) database The application uses the Flyway tool to create and update the database scheme. Each module can contain its own set of scripts, which are applied to the application database scheme at the start of the application (in the phase after initializing the data connection, or rather after initializing the hibernate context)

Tasks scheduler

Anonymous (anonymous@undisclosed.example.com) — 2019-02-27T14:39:27+00:00

Tasks scheduler scheduler The task can be scheduled in three different ways or using three types of triggers: * Settled time - this sets a launching time. If the time is set with a past date, the task is launched right away. * Cron - Quartz expression * Dependent task - the trigger here is when another task has successfully ended. Dependent tasks are executed by

Modules

Anonymous (anonymous@undisclosed.example.com) — 2026-04-07T07:49:46+00:00

Delegation Documentation Modules Modules The Architecture of CzechIdM is highly modular. The core module serves as a basic module and is essential for the application run. All other modules are usually dependent on the Core module. The Acc module users Core module services and is also very important to the application, but the application can run with the module turned off. The module takes care of user accounts on connected systems. Usually the module is ON on almost all cases. Other important…

Overview of EAVs and dynamic forms

Anonymous (anonymous@undisclosed.example.com) — 2019-02-14T15:47:04+00:00

Overview of EAVs and dynamic forms configuration eav attributes form attachment Dynamic forms are used for: * extending standard entity attributes with custom, project specific attributes, * dynamic configurations - e.g. system connector configurations. Dynamic forms are supported for selected entities:

User type

Anonymous (anonymous@undisclosed.example.com) — 2020-08-14T10:43:47+00:00

User type final form projection User type (projection) was added in CzechIdM version 10.2.0. Projection defines frontend form to read, create and edit user. We can create and edit user by different form. For example externe and internal employee can be created and edited differently (different attributes has to be filled). Used projection for user creation is set as user type.

Authentication

Anonymous (anonymous@undisclosed.example.com) — 2020-08-31T13:43:13+00:00

Authentication security authentication authenticator Basic view From the simple viewpoint, authentication mechanism in CzechIdM can be divided into three areas: * First access: Unauthenticated users come to CzechIdM for the first time. They fill in their login and password and log in.