Sunday, June 5, 2016

VMware Identity Manager (vIDM)

VMware Identity Manager can act as an identity platform or it can federate identity from other identity platforms such as ADFS, Okta or another SAML platforms. This is how it works:
  1. A user browses to the vRealize Automation home page
  2. The unauthenticated user is redirected to VMware Identity Manager which has been configured as identity management platform
  3. If the browser does not already have a session established with VMware Identity Manager the user is redirected the customer's identity platform
  4. The customer enters in their credentials into the 3rd Party identity platform
  5. A SAML assertion is generated by the identity platform and passed to vIDM
  6. VMware Identity Manager generates an OAuth2 token and passes it to vRealize Automation
  7. vRealize Automation validates the OAuth2 token and grants access
This provides organizations with a wide range of options for integrating vRealize Automation into their existing identity management system.

No comments: