|
|
The Benefits of Identity and Access Management
Strachota, Marek ; Balada, Jakub (advisor) ; Buchalcevová, Alena (referee)
This thesis defines and verifies the benefits of Identity and Access management systems that firms and institutions make use of. The first part contains an examination of the very basic principles of Identity and Access management. This is where the characteristic features are described and their advantages and disadvantages valued. The last part sums up and comments all the advantages, drawbacks and possible risks, while a certain set of metrics are recommended. The following part describes the most important firms on the Identity and Access management market and their own products. Trends and market situation is examined. The practical part focuses on the real benefits of Identity and Access management solutions when used in a chosen firm. The situation before and after upgrading a certain Identity and Access management solution in a selected firm is observed and the benefits and shortcomings are evaluated. The outcome of this thesis is to confirm both theoretical and practical expectations and considerations of Identity and Access management solutions in a real life situation.
|
|
|
Password management in the enterprise network
Turanský, Jan ; Pavlíček, Luboš (advisor) ; Klíma, Tomáš (referee)
The aim of this bachelor work is to describe and evaluate the importance and options of password management in the enterprise. Almost each enterprise owns important documents with valuable information, which are saved to it' s servers or hard drives. Safe password management protects these information against attackers, who try to gain them and misuse. In a practical part is described actual password management in a specific enterprise with evaluation and with recommendation to improvement if necessary.
|
|
|
Signing in users using simpleSAMLphp
Vrbík, Tomáš ; Pavlíček, Luboš (advisor) ; Palovský, Radomír (referee)
The document theoretically and practically deals with capabilities of using shared authentication in 3 varieties. The first is technologically easiest alternative of direct access to the authentication database. Second one is usage of shared authentication website, commonly known as Open ID. Third option is Single Sign-On system. The goal is to solve the fact dominating in use, where there is a need to have a special account set for every service user uses. The amount of services supporting shared authentication is minor. The second part of the document describes in detail the deployment of simpleSAMLphp, the web application designed for an implementation of the Single Sign-On. For the implementation a web server with PHP support has been used. As an application, which uses the shared authentication via simpleSAMLphp, WordPress was picked. Authenticating users on the side of Identity Provider was done against LDAP directory server OpenDS.
|
guest ::
