LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.

•

1 j'aime•378 vues

LemonLDAP::NG is ten years old but still innovating! The 2.0 release provides support of OpenID Connect, a brand new SSO protocol that will be used by French administration trough France Connect.

Technologie

LemonLDAP::NG 2.0 overview
@clementoudot

2
Clément OUDOT
http://sflx.ca/coudot
● Founded in 1999
● >100 persons
● Montréal, Quebec City, Ottawa, Paris
● ISO 9001:2004 / ISO 14001:2008
● contact@savoirfairelinux.com

4
Some history
2003 2006 2010 2014
Project
creation
NG
version
V 1.0
SAML
CAS
OpenID
V 1.4 V 2.0
OpenID
Connect
2016

5
Single Sign On
User
Web Application
WebSSO Portal
1
2
3

6
Access Control
User
Web
Application
1
SSO
2
Authorization
3

7
Components
CommonCommon
ManagerManager
HandlerHandler
PortalPortal
Administration
interface
User interactions
Applications protection

8
Authentication backends
LDAPLDAP
ADAD
ApacheApache SAMLSAML
CASCAS RadiusRadius OpenIDOpenID
WebIDWebID
BrowserBrowser
IDID
DBIDBI
YubikeyYubikey

9
Self Service
PasswordPassword
changechange
PasswordPassword
resetreset
AccountAccount
CreationCreation

10
Identity protocols gateway
SAMLSAMLCASCAS
OpenIDOpenID

12
AngularJS Manager
● FrontEnd written with AngularJS
● Responsive design
● Configuration data as JSON
● Import/Export feature
● Edition of multiple values on the same screen
● Possibility to set a log message on save

14
Handler API
● No more direct link between Handler and mod_perl
● Creation of an internal API, with implementations:
– Apache mod_perl 1
– Apache mod_perl 2
– CGI
– Nginx
– PSGI

16
CAS attributes exchange
● Conform to CAS 3.0 standard
● Returns attributes in service ticket validation response,
inside <cas:attributes>
● Compatible with phpCAS::getAttributes() function

17
OpenID Connect
● Based on OAuth 2.0 / JOSE
● Specific scope “openid” to receive an ID token
● User consent required to share its identity
● Access token delivered to request UserInfo endpoint
● Already used by Google to manage authentication

18
Roles
Resource owner
(end-user)
Client
(third-party)
Authorization
Server
Resource
Server

19
Authorization Request
Authorization Grant
Authorization Grant
Access Token
Access Token
Protected Resource

20
RPRP OPOP
(1) AuthN Request
(2) AuthN & AuthZ
(3) AuthN Response
(4) UserInfo Request
(5) UserInfo Response

23
France Connect
● French administration choose OpenID Connect for its
next generation authentication platform
● LemonLDAP::NG 2.0 :
– Can be client of France Connect: users will be able to sign
with their France Connect identity
– Can be provider of France Connect: France Connect can
delegate authentication to LemonLDAP::NG

Thanks for your attention
@clementoudot
http://sflx.ca/coudot

Contenu connexe

En vedette

Qualipso Open Maturity Model OW2 Conference Nov10

OW2

Cloud Computing is becoming the new paradigm for the Internet and Service provisioning. Open source solutions, especially those resulting from R/D projects, often are neglected due to the absence of track-records in use by real world applications. ETICS is a build, test and certification software developed since 2004 and up to now used at CERN, ENG and others to build and test various complex software systems, such us glite (http://glite.cern.ch) and gcube (http://www.gcube-system.org).

ETICS- quality certification of open source cloud software, OW2con'12, Paris

OW2

Scarbo is an open, complete, SOA ready, SCA powered, OW2 and Eclipse-based BPM solution. The 2.0 release adds a major component to its SOA/BPM solution: a service registry and repository enforcing consistency across design time and runtime by acting as a pivotal reference. By integrating with the EasySOA registry (http://www.easysoa.org), Scarbo opens up the door to BPM / SOA governance and documentation, benefits from service discovery to ease up service reuse, while making switching from test to production service endpoints a breeze.

Consistent service integration in your workflows with OW2 Scarbo 2.0, OW2con'...

OW2

프로젝트N 기획문서

Matthew Chang

Giethoon villagewithoutstreets

alfcoltrane

Manage Traceability with Apache Atlas flexible metadata repository.

OW2

Itf ipp ch09_2012_final

dphil002

Enrolled agent’s examination introduction

dphil002

Ow2 SpagoBI Linuxtag09

OW2

Chapter 11

dphil002

Oscar - The OW2 Quality Program - Cloud Computing World Expo 2016

OW2

Itf ipp ch03_2012_final

dphil002

CompatibleOne OW2 Conference Nov10

OW2

Itf ipp ch06_2012_final

dphil002

Social media knockdown

tellem

PR Campaign Case Study 수강후기

Matthew Chang

Chubby

Amir Payberah

LinkedIn and Twitter Lab for Beginners

Helen Buzdugan

Inteligencia emocional

Sol JO

カマコンバレー @YOKOHAMA Future Session 150421

Kanshin!, Inc.

En vedette (20)

Qualipso Open Maturity Model OW2 Conference Nov10

ETICS- quality certification of open source cloud software, OW2con'12, Paris

Consistent service integration in your workflows with OW2 Scarbo 2.0, OW2con'...

프로젝트N 기획문서

Giethoon villagewithoutstreets

Manage Traceability with Apache Atlas flexible metadata repository.

Itf ipp ch09_2012_final

Enrolled agent’s examination introduction

Ow2 SpagoBI Linuxtag09

Chapter 11

Oscar - The OW2 Quality Program - Cloud Computing World Expo 2016

Itf ipp ch03_2012_final

CompatibleOne OW2 Conference Nov10

Itf ipp ch06_2012_final

Social media knockdown

PR Campaign Case Study 수강후기

Chubby

LinkedIn and Twitter Lab for Beginners

Inteligencia emocional

カマコンバレー @YOKOHAMA Future Session 150421

Similaire à LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.

RMLL 2014 - LemonLDAP::NG - What's new under the SSOn

Clément OUDOT

LemonLDAP::NG is a Free Software dédicated to SSO and access control, used in numerous french administrations and other organizations. Developped since 10 years, it evolves constantly bringing new features at each version. The 1.3 version has been exposed during the last OW2 con'. We will present the 1.4 version that was released in July 2014, with plenty of new features like session cache sharing, bootstrap skin, captcha cluster mode, Nginx support trough LUA Handler and self register service.

OW2con'14 - LemonLDAP::NG 1.4 New features, Linagora

OW2

Enterprise Single Sign On

WSO2

WSO2 Identity Server

WSO2

LemonLDAP::NG is a FOSS for WebSSO, access management and identity federation developed since 2005. Its community is active and regurlarly proposes new versions. This software provides many functionalities: * Multi-domain SSO * Configuration and session management * Form replay * Protocols support : LDAP, CAS, OpenID, SAML, Radius * Authentication methods chaining * Applications portal * Password management * Notifications * Connection history management * Put an application in maintenance state * Inserting a menu on protected applications LemonLDAP::NG can be used as a gateway between many authentifcation protocoles, for example : * Provide identity trough SAML after an LDAP authentication * Provide identity trough CAS after an OpenID authentication * Provide identity trough OpenID after a Twitter authentication LemonLDAP::NG is a efficient mean to link Saas applications to internal applications, all relying on the authentication of the enterprise directory.

LemonLDAP::NG - the New Generation WebSSO !, David Coutadeur, Linagora.

OW2

[OW2Con 2017] News from LemonLDAP::NG

Clément OUDOT

The OW2 Technology Council (TC) makes project lifecycle decisions, builds the overall technical architecture, defines technical guidelines and provides technology validation. It is run by its elected Chairman, Daniele Gagliardi, from Engineering Group, and by the OW2 CTO, Stéphane Laurière. The Council is composed of 50+ OW2 project leaders and additional hands-on open-source practitioners. This presentation will describe the overall role of the Technology Council, the main achievements carried out in 2016 and the outlook for 2016 and 2017.

OW2 Open Source Community Technology Council Update, OW2con'16, Paris.

OW2

LemonLDAP::NG is a FOSS for WebSSO, access management and identity federation developed since 2005. Its community is active and regurlarly proposes new versions. This talk will first present the software and its main functionalities: Multi-domain SSO Configuration and session management Form replay CAS, OpenID and SAML support Authentication methods chaining Applications portal Password management Notifications Then the main novelties of version 1.2: Radius authentication (and use of Google Authenticator) Connection history management Put an application in maintenance state Inserting a menu on protected applications

LemonLDAP NG 1.2, OW2con'12, Paris

OW2

Enabling applications to really thrive (and not just survive) in cloud environments can be challenging. The original 12 factor app methodology helped to lay out some of the key characteristics needed for cloud-native applications... but... as our cloud infrastructure and tooling has progressed, so too have these factors. In this session we'll dive into the extended and updated 15 factors needed to build cloud native applications that are able to thrive in this environment, and we'll take a look at open source technologies and tools that can help us achieve this.

BuildStuffConf Going beyond the 12 factors

Grace Jansen

SonarQube - The leading platform for Continuous Code Quality

Larry Nung

Enterprises are preparing for the release of Windows 10 this year and the end of support for all but the latest version of Internet Explorer, scheduled for 2016. How do you transition these services quickly, efficiently, cost effectively and with minimal impact to the businesses? This Webinar with Fred Pullen, Senior Product Marketing Manager at Microsoft and Tim Davis, Product Marketing Manager of Flexera Software, discusses the challenges and strategies needed to plan the capacity and resources required to package, test and predictably deploy a steady stream of new services including: - Preparation for the upcoming release of Windows 10 - Migration considerations when moving to Internet Explorer 11 - Planning for next generation browsing experiences in Microsoft’s Edge

Planning for Windows 10 and Internet Explorer 11

Flexera

Implementing Oracle Identity Management Using External Authentication Plug-In

Dinesh Gupta

Jdll 2010 lemon_ldap-ng_100_preview

Clément OUDOT

.NET Cloud-Native Bootcamp- Los Angeles

VMware Tanzu

AppDynamics es una nueva clase de software para gestión de rendimiento de aplicaciones (APM o Aplication Performance Management). AppDynamics ha sido diseñado para resolver las problemáticas de las plataformas modernas basadas en JEE y .NET, donde la combinación de servicios y componentes están sometidos a condiciones dinámicas y cambios frecuentes. Y ahora también tiene monitoreo dinámico de la experiencia de usuarios finales (EUM)

AppDynamics Sales Presentation Imagemaker 2014

Urena Nicolas

WSO2 Identity Server 5.3.0 has added a number of new features that were requested for by its users and which are critical for any product in the identity and access management (IAM) space. After a redesign of the identity management framework, a host of new account and password management features were introduced. Now it also supports a host of new IAM protocols including SAML2 single sign-on (SSO) metadata, SAML2 Assertion Query/ Request Profile, the complete OpenID Connect protocol suite and REST Profile for XACML 3.0 among others. What’s more, WSO2 Identity Server 5.3.0 now performs real-time analytics that monitors the identity ecosystem and alerts you when abnormal sessions or suspicious logins occur. This aspect of the product also has the ability to terminate sessions to ensure that your enterprise is fully secured. This webinar will explore New features and improvements in account and password management New IAM protocols that are supported Real-time security alerting capabilities WSO2 Identity Server 6.0 roadmap

WSO2 Identity Server 5.3.0 - Product Release Webinar

WSO2

Enabling applications to really thrive (and not just survive) in cloud environments can be challenging. The original 12 factor app methodology helped to lay out some of the key characteristics needed for cloud-native applications... but... as our cloud infrastructure and tooling has progressed, so too have these factors. In this workshop we'll dive into the extended and updated 15 factors needed to build cloud native applications that are able to thrive in this environment, and get hands-on with open source technologies and tools (including MicroProfile, Jakarta EE, Open Liberty, OpenJ9, and more!) that can help us achieve this.

GIDS_15FactorWorkshop.pdf

RichHagarty

Software AG was top ranked in current offering and received among the highest scores in the strategy category in the Forrester Wave. webMethods Hybrid Integration Platform combines traditional on-premise integration with cloud integration capabilities to support a wide range of integration patterns for the modern digital enterprise. Kellton Tech’s Digital Connected Enterprise (DCE) is a leader in enterprise-level integration, API management and multi-speed IT strategy, leveraging Software AG’s Digital Business Platform Kellton Tech empowers world’s best-known brands to effectively use Software AG’s Digital Business Platform to innovate, differentiate and win in the digital world. In this session, we will discuss - Details about webMethods 9.12 release - Significant features and enhancements in webMethods 9.12 - Kellton Tech’s upgrade methodology and modernization offering

Whats new in web methods 9.12

Kellton Tech Solutions Ltd

Java2 days 5_agile_steps_to_cloud-ready_apps

Payara

[Pass the SALT 2021] Hosting Identity in the Cloud with free softwares

Worteks

Similaire à LemonLDAP::NG 2.0. OW2con'15, November 17, Paris. (20)

RMLL 2014 - LemonLDAP::NG - What's new under the SSOn

OW2con'14 - LemonLDAP::NG 1.4 New features, Linagora

Enterprise Single Sign On

WSO2 Identity Server

LemonLDAP::NG - the New Generation WebSSO !, David Coutadeur, Linagora.

[OW2Con 2017] News from LemonLDAP::NG

OW2 Open Source Community Technology Council Update, OW2con'16, Paris.

LemonLDAP NG 1.2, OW2con'12, Paris

BuildStuffConf Going beyond the 12 factors

SonarQube - The leading platform for Continuous Code Quality

Planning for Windows 10 and Internet Explorer 11

Implementing Oracle Identity Management Using External Authentication Plug-In

Jdll 2010 lemon_ldap-ng_100_preview

.NET Cloud-Native Bootcamp- Los Angeles

AppDynamics Sales Presentation Imagemaker 2014

WSO2 Identity Server 5.3.0 - Product Release Webinar

GIDS_15FactorWorkshop.pdf

Whats new in web methods 9.12

Java2 days 5_agile_steps_to_cloud-ready_apps

[Pass the SALT 2021] Hosting Identity in the Cloud with free softwares

Plus de OW2

This presentation is given by Stefano Pampaloni at the RIOS Open Source Week, Nov. 2022 in Roma. Abstract: Established in 2007 as a non-profit organisation, OW2 is an independent community dedicated to promoting open source software for information systems and fostering their business ecosystems. OW2 federates 50+ organizations and 2500+ IT professionals worldwide. OW2 hosts 50+ technology Projects. RIOS is an Italian network of companies established in 2015 aiming to improve open source adoption and to build sustainable businesses around it OW2 and RIOS are working together to foster collaboration between European open-source stakeholders.

OW2 and RIOS teaming up to boost the open source impact, Nov. 2022 in Roma

OW2

The Good Governance Initiative (GGI) proposes a methodological framework to assess open-source awareness, compliance and governance in any kind of organizations, helping them to structure and improve the use of FOSS towards an OSPO. The GGI was initiated by OW2 and is developed by the OSPO Alliance. This presentation will give an overview of the initiative, its organization, roadmap, first achievements and next steps.

The Open Source Good Governance Initiative presented at RIOS OS Week, Nov. 20...

OW2

GLPi v.10, les fonctionnalités principales et l'offre cloud

OW2

Centreon: superviser le Cloud et le Legacy à partir d'une même plateforme, po...

OW2

FusionIAM : la gestion des identités et des accés open source

OW2

Connaissez-vous OW2 ? Aventure commencée en 1999 à Grenoble sur la base d'un consortium industriel dédié au middleware open source, devenu association sans but lucratif d'échelle européenne en 2006 sous le nom d'OW2, nous agissons pour la diffusion du libre dans le monde professionnel depuis plus de 20 ans. OW2 compte des adhérents de toute taille : 2.600 individuels en adhésion gratuite, et 30 institutionnels, de la TPE unipersonnelle à Orange, Microsoft ou Huawei, de l'Inria ou le Fraunhofer Fokus à la Gendarmerie Nationale ou la ville de Paris. Nos projets sont plus célèbres que nous : ASM, Centreon, Lutece, PrestaShop, Sympa ou Rocket.Chat vous diront peut-être quelque chose ? Philosophiquement, OW2 se trouve quelque part entre Eclipse et Apache : culture technique, infrastructure d'hébergement et d'assistance pour les projets, sur la ligne de crête entre l'esprit du libre et les contraintes du business, nous sommes un acteur de l'économie sociale, persuadé que l'open source est central dans une transformation sociétale nécessaire qui ne pourra se faire sans l'adhésion du monde industriel et académique. A un tournant de notre histoire, nous investissons le créneau de la qualité industrielle des projets avec notre méthodologie "Market readiness Levels", et la gouvernance de l'open-source comme membre fondateur de l'OSPO Alliance (ospo.zone) et éditeur du guide méthodologique "OSS Good Governance handbook". Ne nous y trompons pas : OW2 est un acteur éminemment politique, porteur d'une vision fondée sur la transformation du monde professionnel et de ses valeurs par le code et la coopération. Et cette présentation, avec un survol de notre histoire, adhérents, initiatives et projets, est également l'occasion d'en débattre.

OW2 Association Européenne aux racines grenobloises, transformer l'industrie ...

OW2

SFScon'20 Bringing the User into the Equation

OW2

A few years ago, Heartbleed epitomized a massive open source sustainability problem for critical parts of the internet infrastructure. The bug, which affected the popular OpenSSL cryptographic software library, notably compromised the confidentiality of 4.5 million US patient records and cost the industry an estimated $500M. It was soon revealed that the root cause of the issue was that OpenSSL was precariously understaffed. Open source sustainability became a major theme overnight. Stories of maintainer burn-out made the headlines. And tentative solutions started to emerge, most of them donation-based. In this talk we’ll explore a number of existing strategies to fund open source and make it more sustainable, from patronage to dedicated ad networks. And we’ll defend the idea that the best path to open source sustainability is to help companies understand the tangible business value they can get from contributing to open source.

Towards a sustainable solution to open source sustainability, OW2online20, Ju...

OW2

Advanced proactive and polymorphing cloud application adaptation with MORPHEM...

OW2

Presentation by Gael Blondelle, Managing Director at Eclipse Foundation. Abstract: In this talk, we will cover two complementary topics: The different Eclipse projects related to Open Source governance, like Eclipse SW360, SW360 Antenna, and Eclipse Steady, as well as the opportunity to leverage SW360 as the core of a larger Open Source governance initiative. The Eclipse IP Process that has been applied to hundreds of Eclipse projects for more than 15 years and is going through a modernization process that involves both simplification from the developer point of view, and openness to new source of trusted data like Clearly Defined.

Open Source governance and the Eclipse Foundation, OW2online, June 2020

OW2

Open source contribution policies are long, boring, overlooked documents, that generally suck. They're designed to protect the company at all costs. But in the process, end up hurting engineering productivity, and morale. Sometimes they even unknowingly put corporate IP at risk. But that's not inevitable. It's possible to write open source contribution policies that make engineers lives easier, boost morale and productivity, reduce attrition, and attract new talent. And it's possible to do so while reducing the company's IP risk, not increasing it. In this talk, we'll look at the general structure of contribution policies, examples in the wild, and tactics to make them suck less. We'll also look at how to turn these policies into self-service software, preventing the tedious email back and forth between engineering and legal in most cases and making open source contribution a breeze. Presentation by Tobbie Langel, UnLockOpen.

Open source contribution policies, OW2online, June 2020

OW2

Presentation by Jose Manrique, CEO at Bitergia. Abstract: 2020 has started intense for many countries. It's been just a few months, but the things we have lived make us feel like it's been years. Covid-19 pandemic has hit everywhere and forced many people to work from home. If you were lucky enough to be in one of these modern companies that have adopted digital transformation years ago, would that be a problem? Many people have thought it wasn't, but it has really been. And what about the rest of the software developers involved in companies not ready for remote work at all? It's been said that nothing has boosted more companies' digital transformation than covid-19. But, are their managers ready for such change? Managing software development at scale is not an easy task, and this pandemic has disrupted the way projects are being developed in many companies. During this talk, I would like to share lessons learned from open source development at scale that might help companies to adapt to these changes. But more specifically, lessons about how software development analytics help managers to understand collaborative remote work.

Software development at scale, pandemic lockdown and oss ecosystems, OW2onlin...

OW2

Presentation by Olivier Fendt, Senior Manager Open Source Software at Siemens. Abstract: The well-known OpenChain project launched in Sept 2019 a Tooling Group. The objective of this group is to realize a turn-key Open Source toolchain for Open Source Compliance, which is / can be easily integrated in the software development CI/CD pipelines. The Tooling Group uses open source principles to accomplish this, creating a meritocracy producing real world solutions for real world challenges, and sharing these results with all interested parties. The presentation gives an overview of the Tooling group its objectives, the areas of focus, the current state and future plans.

Overview of the OpenChain Reference Tooling Work Group, OW2online20, June 2020

OW2

Presentation by Nicolas Toussaint, Software Architect, Orange. Abstract: Orange and Orange Business Services have turned to full open source solutions to tackle the complex problem of respecting the open source legal compliance constraints. This talk presents the journey undertaken the past few years to build and improve the existing tooling and processes to make compliance validation possible, as well as allow overseeing progresses.

Open Source Compliance at Orange, OW2online, June 2020

OW2

Presentation by Boris Baldassari, Consultant, Castalia Solutions. Abstract: While Open Source Software has become mainstream, the understanding of its key principles, from ethics and collaboration to governance and community management, is gaining more interest and attention. There is a comprehensive volume of studies and reports backing up our individual and collective experience, yet we still cannot reliably measure these characteristics, and even less clearly define or assess them. In an attempt to build up confidence and foster maturity in this area, this talk will look at the various existing models and metrics related to OSS compliance and governance, and build upon them to propose methods and tools for their evaluation and analysis. We will discuss the requirements and essential questions to ask, offer guidelines for implementation and suggest efficient ways to present results.

Ideas, methods and tools for OSS Compliance assessment, OW2online, June 2020

OW2

Presentation by Amir Mir, TUDelft. As recent events, such as the leftpad incident and the Equifax data breach, have demonstrated, dependencies on networks of external libraries can introduce projects to significant operational and compliance risks as well as difficult to assess security implications. FASTEN introduces fine-grained, method-level, tracking of dependencies on top of existing dependency management networks. In our talk, we will present how FASTEN works on top of the Rust/Cargo and Java/Maven ecosystems.

Intelligent package management with FASTEN, OW2online, June 2020

OW2

DECODER, a Smarter Environment for DevOps Teams , OW2online, June 2020

OW2

Presentation by Hui Song, Senior Scientist, SINTEF. We would like to share our research journey towards enabling DevOps for IoT applications, and how Open Source makes the journey feasible and fun. DevOps is widely adopted for developing cloud applications, which supports developers in continuously placing software changes directly to production. As companies are including IoT and Edge devices into their IT infrastructures, supporting DevOps for IoT is a must. However, IoT challenges some fundamental assumptions behind DevOps, such as the homogeneous infrastructure and centralized governance, and therefore, breaking-through research is needed. Funded by H2020, 30 people from 12 partners crossing academia and industry gathered to solve these fundamental challenges, which results in full-stack open source tools for automatic deployment, learning-based operation and security monitoring of IoT applications, and risk management of the development process. The tools are evaluated on industrial use cases in intelligent transportation, smart building, and eHealth. The mass open source tools and communities around IoT development provides the sound foundation for this design research and the opportunities for the further exploitation of the results. In particular, we are proud of spinning off a start-up to commercialize the risk management services in the open source + SaaS model.

Enabling DevOps for IoT software development, powered by Open Source, OW2onli...

OW2

Artificial Intelligence is now smarter than ever, showing human-like abilities at complex tasks such as images classification or natural language processing. But despite its recent advances, it's still not a silver bullet. This talk will present a few challenges in the research and development of artificial intelligence that slow down its progress and adoption. In particular, problems around fairness, the training of models and how to share them will be introduced as well as possible Free Software solutions. Presentation by Vincent Lequertier, PhD Student, Lyon UNiverversity.

Upcoming Challenges in Artificial Intelligence Research and Development, OW2o...

OW2

We propose a walkthrough of current utilization of Open Source Software in capacity planning for the Orange network infrastructure. The objective of our project is to have a platform that helps engineers to carefully plan the resources available to them as well as to correlate different incidents within remote parts of the infrastructure. In order to achieve this we started using Cacti with the Spine collector which worked great, but Orange France is a very large company with many entities, each with its own governance, and so we began to see some limitations. There was a need to centralize some information from different parts in Orange France as well as to integrate the equipment capacity and load values into BigData Orange. In order to achieve this we developed the “Puits de donneés” platform completely based on Open Source Software. The visualization and statistical analysis part is handled by Grafana while the ETL runs on Apache Software Foundation products like NiFi, Zookeeper and Ambari with a storage solution from MariaDB for which we did extensive performance tuning and customization due to the large amounts of data.

Cacti and Big Data at Orange France, OW2online, June 2020

OW2

Plus de OW2 (20)

OW2 and RIOS teaming up to boost the open source impact, Nov. 2022 in Roma

The Open Source Good Governance Initiative presented at RIOS OS Week, Nov. 20...

GLPi v.10, les fonctionnalités principales et l'offre cloud

Centreon: superviser le Cloud et le Legacy à partir d'une même plateforme, po...

FusionIAM : la gestion des identités et des accés open source

OW2 Association Européenne aux racines grenobloises, transformer l'industrie ...

SFScon'20 Bringing the User into the Equation

Towards a sustainable solution to open source sustainability, OW2online20, Ju...

Advanced proactive and polymorphing cloud application adaptation with MORPHEM...

Open Source governance and the Eclipse Foundation, OW2online, June 2020

Open source contribution policies, OW2online, June 2020

Software development at scale, pandemic lockdown and oss ecosystems, OW2onlin...

Overview of the OpenChain Reference Tooling Work Group, OW2online20, June 2020

Open Source Compliance at Orange, OW2online, June 2020

Ideas, methods and tools for OSS Compliance assessment, OW2online, June 2020

Intelligent package management with FASTEN, OW2online, June 2020

DECODER, a Smarter Environment for DevOps Teams , OW2online, June 2020

Enabling DevOps for IoT software development, powered by Open Source, OW2onli...

Upcoming Challenges in Artificial Intelligence Research and Development, OW2o...

Cacti and Big Data at Orange France, OW2online, June 2020

Dernier

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

apidays

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

GenAI Risks & Security Meetup 01052024.pdf

lior mazor

A Principled Technologies deployment guide Conclusion Deploying VMware Cloud Foundation 5.1 on next gen Dell PowerEdge servers brings together critical virtualization capabilities and high-performing hardware infrastructure. Relying on our hands-on experience, this deployment guide offers a comprehensive roadmap that can guide your organization through the seamless integration of advanced VMware cloud solutions with the performance and reliability of Dell PowerEdge servers. In addition to the deployment efficiency, the Cloud Foundation 5.1 and PowerEdge solution delivered strong performance while running a MySQL database workload. By leveraging VMware Cloud Foundation 5.1 and PowerEdge servers, you could help your organization embrace cloud computing with confidence, potentially unlocking a new level of agility, scalability, and efficiency in your data center operations.

Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...

Principled Technologies

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Neo4j

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc

The value of a flexible API Management solution for Open Banking Steve Melan, Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The value of a flexible API Management solution for O...

apidays

Tata AIG General Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

🐬 The future of MySQL is Postgres 🐘

RTylerCroy

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

Increase engagement and revenue with Muvi Live Paywall! In this presentation, we will explore the five key benefits of using Muvi Live Paywall to monetize your live streams. You'll learn how Muvi Live Paywall can help you: Monetize your live content easily: Set up pay-per-view access to your live streams and start generating revenue from your content. Increase audience engagement: Provide exclusive, premium content behind the paywall to keep your viewers engaged. Gain valuable viewer insights: Track viewer data and analytics to better understand your audience and tailor your content accordingly. Reduce content piracy: Muvi Live Paywall's security features help protect your content from unauthorized distribution. Streamline your workflow: The all-in-one platform simplifies the process of managing and monetizing your live streams. With Muvi Live Paywall, you can take control of your live stream monetization and create a sustainable business model for your content. Learn more about Muvi Live Paywall and start generating revenue from your live streams today!

Top 5 Benefits OF Using Muvi Live Paywall For Live Streams

Roshan Dwivedi

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Rafal Los

Created by Mozilla Research in 2012 and now part of Linux Foundation Europe, the Servo project is an experimental rendering engine written in Rust. It combines memory safety and concurrency to create an independent, modular, and embeddable rendering engine that adheres to web standards. Stewardship of Servo moved from Mozilla Research to the Linux Foundation in 2020, where its mission remains unchanged. After some slow years, in 2023 there has been renewed activity on the project, with a roadmap now focused on improving the engine’s CSS 2 conformance, exploring Android support, and making Servo a practical embeddable rendering engine. In this presentation, Rakhi Sharma reviews the status of the project, our recent developments in 2023, our collaboration with Tauri to make Servo an easy-to-use embeddable rendering engine, and our plans for the future to make Servo an alternative web rendering engine for the embedded devices industry. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://ossna2024.sched.com/event/1aBNF/a-year-of-servo-reboot-where-are-we-now-rakhi-sharma-igalia

A Year of the Servo Reboot: Where Are We Now?

Igalia

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

AWS Community Day CPH - Three problems of Terraform

Andrey Devyatkin

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Top 10 Most Downloaded Games on Play Store in 2024

SynarionITSolutions

Dernier (20)

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

GenAI Risks & Security Meetup 01052024.pdf

Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

Apidays New York 2024 - The value of a flexible API Management solution for O...

Tata AIG General Insurance Company - Insurer Innovation Award 2024

🐬 The future of MySQL is Postgres 🐘

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Top 5 Benefits OF Using Muvi Live Paywall For Live Streams

The 7 Things I Know About Cyber Security After 25 Years | April 2024

A Year of the Servo Reboot: Where Are We Now?

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

AWS Community Day CPH - Three problems of Terraform

Boost Fertility New Invention Ups Success Rates.pdf

Top 10 Most Downloaded Games on Play Store in 2024

LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.

1. LemonLDAP::NG 2.0 overview @clementoudot

2. 2 Clément OUDOT http://sflx.ca/coudot ● Founded in 1999 ● >100 persons ● Montréal, Quebec City, Ottawa, Paris ● ISO 9001:2004 / ISO 14001:2008 ● contact@savoirfairelinux.com

3. LemonLDAP::NG Presentation

4. 4 Some history 2003 2006 2010 2014 Project creation NG version V 1.0 SAML CAS OpenID V 1.4 V 2.0 OpenID Connect 2016

5. 5 Single Sign On User Web Application WebSSO Portal 1 2 3

6. 6 Access Control User Web Application 1 SSO 2 Authorization 3

7. 7 Components CommonCommon ManagerManager HandlerHandler PortalPortal Administration interface User interactions Applications protection

8. 8 Authentication backends LDAPLDAP ADAD ApacheApache SAMLSAML CASCAS RadiusRadius OpenIDOpenID WebIDWebID BrowserBrowser IDID DBIDBI YubikeyYubikey

9. 9 Self Service PasswordPassword changechange PasswordPassword resetreset AccountAccount CreationCreation

10. 10 Identity protocols gateway SAMLSAMLCASCAS OpenIDOpenID

11. Overview of version 2.0

12. 12 AngularJS Manager ● FrontEnd written with AngularJS ● Responsive design ● Configuration data as JSON ● Import/Export feature ● Edition of multiple values on the same screen ● Possibility to set a log message on save

13. 13

14. 14 Handler API ● No more direct link between Handler and mod_perl ● Creation of an internal API, with implementations: – Apache mod_perl 1 – Apache mod_perl 2 – CGI – Nginx – PSGI

15. 15 Portal skin background

16. 16 CAS attributes exchange ● Conform to CAS 3.0 standard ● Returns attributes in service ticket validation response, inside <cas:attributes> ● Compatible with phpCAS::getAttributes() function

17. 17 OpenID Connect ● Based on OAuth 2.0 / JOSE ● Specific scope “openid” to receive an ID token ● User consent required to share its identity ● Access token delivered to request UserInfo endpoint ● Already used by Google to manage authentication

18. 18 Roles Resource owner (end-user) Client (third-party) Authorization Server Resource Server

19. 19 Authorization Request Authorization Grant Authorization Grant Access Token Access Token Protected Resource

20. 20 RPRP OPOP (1) AuthN Request (2) AuthN & AuthZ (3) AuthN Response (4) UserInfo Request (5) UserInfo Response

21. 21 http://jwt.io/

22. 22

23. 23 France Connect ● French administration choose OpenID Connect for its next generation authentication platform ● LemonLDAP::NG 2.0 : – Can be client of France Connect: users will be able to sign with their France Connect identity – Can be provider of France Connect: France Connect can delegate authentication to LemonLDAP::NG

24. Thanks for your attention @clementoudot http://sflx.ca/coudot

LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.

Recommandé

Recommandé

Contenu connexe

En vedette

En vedette (20)

Similaire à LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.

Similaire à LemonLDAP::NG 2.0. OW2con'15, November 17, Paris. (20)

Plus de OW2

Plus de OW2 (20)

Dernier

Dernier (20)

LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.