Upravljanje z identitetami

KONC, DAVID (author), Brodnik, Andrej (mentor), Fele Žorž, Gašper (co-mentor)

Diplomsko delo obravnava področje internetne varnosti. V nalogi opredelimo gradnike sistema, kot so ponudniki storitve, ponudnik identitete ter kako med seboj komunicirata. Cilj je namestiti tri različne ponudnike storitve (Wordpress, Moodle, Nextcloud) in jih povezati s ponudnikom identitete (Authentik). Za avtentikacijo bomo uporabili varnostni protokol SAML(Security Assertion Markup Language). V ponudniku identitete ustvarimo uporabnika in ga uporabimo za avtentikacijo pri ponudnikih storitev. Uspelo se nam je avtenticirati pri vseh ponudnikih storitev z uporabo protokola SAML.

• Language: Slovenian
• Keywords: identitete, upravljanje, internetna varnost, ponudnik identitete, ponudnik storitve, SAML
• Work type: Bachelor thesis/paper
• Typology: 2.11 - Undergraduate Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2022
• PID: 20.500.12556/RUL-140422
• COBISS.SI-ID: 123473411
• Publication date in RUL: 14.09.2022

Secondary language

• Language: English
• Title: Identity management

Abstract

The thesis deals with the field of internet security. In the thesis we define the building blocks of the system, such as service providers, identity providers and how they communicate with each other. The goal is to install three different service providers (Wordpress, Moodle, Nextcloud) and connect them to an identity provider (Authentik). We have used SAML (Security Assertion Markup Language) security protocol for authentication. We create a user in the identity provider and use it for authentication with the provider's services. We were able to authenticate with all service providers using the SAML protocol.

• Keywords: identities, management, internet security, identity provider, service provider, SAML