20.500.12556/RUL-168086 Ogrodje za izvedbo življenjskega cikla digitalnih identitet Framework for implementing the digital identity lifecycle V dobi digitalizacije imajo zaposleni številne uporabniške račune in dostopne pravice, ki tvorijo njihove digitalne identitete. Ob prihodu v podjetje so njihovim digitalnim identitetam dodeljene vloge in dostopi, ki se skozi čas spreminjajo in ob odhodu odvzamejo. Ta proces se imenuje življenjski cikel digitalnih identitet, znan tudi kot proces prihoda, premestitev in odhoda (ang. joiner, mover, leaver process ali JML). Za upravljanje digitalnih identitet obstajajo posebni sistemi, ki omogočajo nadzor nad podatki, ureditev delovnih procesov in zagotavljanje varnosti. Eden izmed vodilnih sistemov na področju upravljanja identitet je sistem OpenText Identity Manager, ki, kljub njegovi zmogljivosti, ne podpira upravljanja procesa JML. Magistrsko delo naslavlja to pomanjkljivost z razvojem prilagodljive in avtomatizirane rešitve za upravljanje procesa JML. Naš namen je izvesti glavne koncepte procesa JML v sistemu Identity Manager, saj bomo tako olajšali delo administratorjem IT sistemov in zagotovili varno delovno okolje. Cilj je bil izdelava rešitve, ki bo prilagodljiva različnim podjetjem in hkrati dovolj zanesljiva za implementacijo v sistemih z več tisoč uporabniki. Ob tem se pojavi vprašanje, ali je sploh izvedljivo razviti tako splošno in prilagodljivo rešitev. Naša hipoteza navaja, da je v sistemu Identity Manager možno izvesti glavne koncepte procesa JML in da bo rešitev dovolj prilagodljiva za najrazličnejše IT sisteme. Magistrsko delo po uvodu bralcu najprej predstavi proces JML, nakar opiše sistem Identity Manager in v njem razvito rešitev za upravljanje procesa JML. Pri razvoju je bil uporabljen iterativni pristop, kjer smo sproti testirali posamezne funkcionalnosti in jih izboljšali na podlagi odkritih težav. Na koncu magistrskega dela je opisano, kako je bila rešitev procesa JML izvedena v sistemu za upravljanje identitet v produkcijskem okolju podjetja. Magistrsko delo ne prispeva le k teoriji, ampak ponuja odgovore na praktične izzive upravljanja procesa JML, s katerimi se srečujejo sodobna podjetja. S tem postavlja temelje za prihodnje raziskave in razvoj na področju upravljanja identitet v Sloveniji. In the age of digitalization, employees have numerous user accounts and access rights that form their digital identities. Upon joining the company, their digital identities are assigned roles and accesses that change over time and are finally revoked upon departure. This process is called the lifecycle of digital identities, also known as the "joiner, mover, leaver process" or the JML process for short. To manage digital identities, specialized systems exist that provide control over data, streamline workflows, and ensure security. One of the leading systems in the field of identity management is the OpenText Identity Manager system, which, despite its capabilities, does not support managing the JML process. The master's thesis addresses this shortcoming by developing a flexible and automated solution for managing JML processes. Our purpose is to implement the main concepts of the JML process in the Identity Manager system, as this will make the work of IT system administrators easier and provide a safe and secure working environment. The goal was to create a solution that will be adaptable to different companies and at the same time reliable enough to be implemented in a system with several thousand users. This raises the question of whether it is even feasible to develop such a general and flexible solution. Our hypothesis states that the main concepts of the JML process can be implemented in the Identity Manager system and that the solution will be flexible enough for a wide variety of IT systems. The master's thesis is structured in a way that it, after an introduction, first presents the JML process to the reader, followed by a description of the Identity Manager system and the developed within it solution for managing the JML process. An iterative approach was used during the development, where we continuously tested individual functionalities and refined them based on the discovered problems. At the end of the master's thesis is the description of how the developed solution was implemented in a company's production environment identity management system. The master's thesis not only contributes to theory but also offers answers to the practical challenges of JML process management that a modern company faces. Thus, it lays the foundation for future research and development in the field of identity management in Slovenia. IDM JML OpenText Identity Manager Identity Applications življenjski cikel identitet IDM JML OpenText Identity Manager Identity Applications identity lifecycle true false false Slovenski jezik Angleški jezik Magistrsko delo/naloga 2025-03-28 09:50:00 2025-03-28 09:50:06 2025-04-24 13:26:55 0000-00-00 00:00:00 2025 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 62951 234170627 Vozelj_Nik_-_Ogrodje_za_izvedbo_zivljenjskega_cikla_digitalnih_identitet.pdf Vozelj_Nik_-_Ogrodje_za_izvedbo_zivljenjskega_cikla_digitalnih_identitet.pdf 1 D54DB669B9C90C98D8EBA71C0A48BE04 fcd51f32a54248678bce5c145c839c8b7d5543f0c1295e3e1f9f9f148cc886c9 9d7b3fd7-0bb0-11f0-b232-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=201085 Fakulteta za elektrotehniko 0 0 0