アイデンティティ管理のソースを表示

[[Category:ネットワーク]]
[[Category:認証]]
{{Related articles start}}
{{Related|LDAP 認証}}
{{Related articles end}}

[[wikipedia:ja:アイデンティティ管理]] (IDM), sometimes also identity and access management (IAM), deals with how users gain a digital identity, the roles, and sometimes the permission granted to this identity.

== Software ==

There is a number of software which helps doing identity management. Amongst, in alphabetical order, tools and related:

* [[Google Authenticator]], two-step auth, using one time passwords.
* [[Initiative for Open Authentication]], standardization on how to get an access token for a web API call. Includes passwords, but will in future use WebAuthn.
* kanidm, some [https://fy.blackhats.net.au/blog/html/2019/09/18/announcing_kanidm_a_new_idm_project.html info here]. Successor of LDAP, Kerberos. Server side of WebAuthn.
* [[Kerberos]], with [[Active Directory integration]], [[FreeIPA]], some info [https://fy.blackhats.net.au/blog/html/2017/05/23/kerberos_why_the_world_moved_on.html from a SuSE dev here]
* [[LDAP authentication]], passwords in a central server.
* [[PAM]], linux pluggable authenticaiton modules. Kerberos, LDAP, kanidm, etc. can be plugged into linux.
* [[Security]].
* [[Universal 2nd Factor]], replaced by WebAuthn.
* [[Users and groups]]. can be stored on a system or centrally via LDAP, kanidm.
* WebAuthn, browser web authentication API, replacement for password authentication, uses Yubikey, or the built-in hardware of a device like TouchID or Windows Hello. Backwards compatible with universal 2nd Factor, server side provided by kanidm e.g.