|
|
Cloud-Native Single Sign-On with OpenID Connect and Keycloak
Koval, Maksym ; Pavela, Jiří (referee) ; Malinka, Kamil (advisor)
Cílem této práce je prozkoumat principy protokolů OAuth 2.0 a OpenID Connect a vysvětlit, jak by tyto protokoly měly být implementovány v architektuře mikroslužeb. Jako demonstrační aplikace byly navrhnuty dva webové klienty Angular a dva servery Spring Boot. Práce také vysvětluje připojení Keycloak jako poskytovatele identit pro výše uvedené aplikace. Výsledkem je centralizované autentizace všech aplikací a implementace mechanismu jednotného přihlašování v cloudovém prostředí.
|
|
|
Authentication of web service users
Plašil, Matouš ; Ležák, Petr (referee) ; Burda, Karel (advisor)
In this bachelor thesis are presented methods for Single Sign-On from perspective of client application. It takes a closer look at protocols OpenID and OAuth and explains the main differencies. Next part of the thesis is focused on registration of application and communication between server and client application. This is realized by OAuth protocol. In the practical part is described a created web application and used methods are explained.
|
|
|
Cosign Authentication in PHP
Kovářík, Jiří ; Skokanová, Jana (referee) ; Lampa, Petr (advisor)
Master's thesis deals with issue of cookie-based central authentication services. Present-day methods of single sign-on are described. The specification of single sign-on mechanism Cosign and its authentication filter is closely viewed. Cryptographic algorithms needed by this filter are described, as well as their possible realization in PHP. Next, the implementation of Cosign authentication filter is described. Performance of the filter is tested and its future use is analysed.
|
|
|
Complex Wake-on-LAN solution for particular computer network
Sakala, Peter ; Frolka, Jakub (referee) ; Jeřábek, Jan (advisor)
The goal of this thesis is based in designing a web application from obtained information, which will be used to remotely wake up computers within the Department of Telecommunications FEEC BUT. The theoretical part of the thesis is focused on WoL technology, and related technologies and protocols. Moreover, it is focused on a single sign-on system in web services, functions of eduID.cz federation and current web technologies. The practical part is the actual designing of the application including the database structure required for storing data, its realization, use and testing.
|
|
|
Identity management
Kefer, Daniel ; Polívka, Michal (referee) ; Pelka, Tomáš (advisor)
The master thesis is divided into two parts. In the first part, identity management is described on theoretical basis. Particular domains of identity management including authentication, authorization and audit are explained as well as Single Sign-On concept, i.e. using single credentials and entering them just once for access to multiple independent systems or services. In the second part, which forms the main part of this thesis, a practical project was implemented on the infrastructure of the Department of Telecommunications within the Faculty of Electrical Engineering and Communication, Brno University of Technology. The goal of this project was to create an environment for central 4 authentication and Single Sign-On using only open source technologies within a computer laboratory used for teaching OS Linux. The project is based on OS Linux Debian, Kerberos as a protocol for secure authentication and LDAP server OpenLDAP. For the Single Sign-On demonstration, NFS services for accessing data on the network were chosen. Using NFS services, users can sign-on to any workstation and access all their data. Administration of users and their import from central FEEC databases was implemented using scripts developed in Python. Next, using Apache, PHP and MySQL, a front-end audit interface for the network administrator was developed in order to inspect and evaluate security events in the network. Messages about suspicious events are delivered to administrator’s mailbox in real time. The project is intended as a security platform which means that other services can be implemented for Single Sign-On as well as new mechanisms for evaluation of suspicious events.
|
|
|
Excalibur System - SSO Implementation
Chripko, Juraj ; Homoliak, Ivan (referee) ; Malinka, Kamil (advisor)
Cieľom systému Excalibur je presunúť autentifikáciu od hesiel používaných v súčastnosti ku bezheslovej budúcnosti. Zámerom tejto práce je integrácia systému Excalibur s webovými bezheslovými protokolmi SAML a FIDO2. Štandard SAML bol integrovaný do systému Excalibur a úspešne otestovaný s niekoľkými známymi aplikáciami. Excalibur má na starosti samotnú autentifikáciu a manažment používateľov a SAML je použitý na predanie týchto informácii aplikáciam tretích strán. FIDO2 je, na druhú stranu, kompletný autentifikačný štandard, ktorý môže byť do systému Excalibur integrovaný viacerými spôsobmi. Ako najsľubnejší spôsob sa javí výmena autentifikačného mechanizmu systému Excalibur za FIDO2, ale slabá podpora štandardu a chýbajúce funkcie to zatiaľ nedovoľujú.
|
|
|
Automatic Kerberos Key Rotation
Kos, Ondřej ; Henzl, Martin (referee) ; Zelený, Jan (advisor)
Práce je zaměřena na autentizační systém Kerberos a jeho správu, převážne v oblasti Keytab souborů. Práce popisuje základní součásti celého systému, které jsou v těchto operacích zapojeny, a jejich hlavní vlastnosti. Částečně je také popsán administrační systém FreeIPA, jenž pro autentizaci uživatelů Kerberos využívá. Hlavním cílem bylo vytvořit aplikaci schopnou automaticky a bez uživatelova přičinění rotovat klíče Kerbera a zvýšit tak úroveň zabezpečení celého systému pro případy odposlechů komunikace.
|
|
|
Single sign-on systems
Takács, Endre ; Vajsar, Pavel (referee) ; Morský, Ondřej (advisor)
The subject of this bachelor thesis is the so-called single sign-on technology in context of access control methods. It describes the solutions used in wide computer systems, options of implementing security and integration into the Microsoft Windows operating system. The next part specifies the web interface of this technology, where the explanation of the basic terms and principals are also included. It is focused on the Oauth, which will be used in the practical part of work.
|
|
|
Excalibur System - SSO Implementation
Chripko, Juraj ; Homoliak, Ivan (referee) ; Malinka, Kamil (advisor)
Cieľom systému Excalibur je presunúť autentifikáciu od hesiel používaných v súčastnosti ku bezheslovej budúcnosti. Zámerom tejto práce je integrácia systému Excalibur s webovými bezheslovými protokolmi SAML a FIDO2. Štandard SAML bol integrovaný do systému Excalibur a úspešne otestovaný s niekoľkými známymi aplikáciami. Excalibur má na starosti samotnú autentifikáciu a manažment používateľov a SAML je použitý na predanie týchto informácii aplikáciam tretích strán. FIDO2 je, na druhú stranu, kompletný autentifikačný štandard, ktorý môže byť do systému Excalibur integrovaný viacerými spôsobmi. Ako najsľubnejší spôsob sa javí výmena autentifikačného mechanizmu systému Excalibur za FIDO2, ale slabá podpora štandardu a chýbajúce funkcie to zatiaľ nedovoľujú.
|
|
|
Single sign-on systems
Takács, Endre ; Vajsar, Pavel (referee) ; Morský, Ondřej (advisor)
The subject of this bachelor thesis is the so-called single sign-on technology in context of access control methods. It describes the solutions used in wide computer systems, options of implementing security and integration into the Microsoft Windows operating system. The next part specifies the web interface of this technology, where the explanation of the basic terms and principals are also included. It is focused on the Oauth, which will be used in the practical part of work.
|
guest ::
