My slide about identity and access management (IAM) in complex and distributed software applications/solutions. The goal was to share real world experiences made when evolving multiple connected software applications on different technical stacks to use/support modern security approaches and standards (specifically oAuth2 and Open ID Connect) while solving several issues with multi-tenancy, multiple distributed (production) server, organizational challenges and integration problems internal as well as with external 3rd party applications.

1. Identity & Access Management in der
Realität: Goodbye, „Hello World“!
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com

2. @RobinSedlaczek
RobinSedlaczek.com
RobinSedlaczek
RobinSedlaczek.com
robin.sedlaczek@live.de
 Community-Leader
 CTO der GmbH Berlin
 Sprecher | Autor | Blogger
Entwickler.de, Heise, DotNetPro, Informatik aktuell, BASTA!, .NET Summit,
ParallelCon, ADC, GUI & DESIGN, DevSpace, Spartakiade...
 Open Source-Entwickler
SharpGL, Roslyn, FxCopAnalyzers, Force Feedback Programming
.NET User Group Berlin-Brandenburg
Ihr habt Fragen?
Ich beantworte sie jederzeit gerne. For free hugs. 😉
Robin Sedlaczek

3. Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
IAM in komplexen und verteilten
Anwendungen

4. @RobinSedlaczek
RobinSedlaczek.com
ZIELE
 Erfahrungsbericht aus der realen Welt
 Probleme
 Lösungen
 Standards (oAuth2 & Open ID Connect)

5. Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
Über uns

6. @RobinSedlaczek
RobinSedlaczek.com
ÜBER UNS
Unsere Produkte
 Tools für strategische Finanzplanung in der Hotelindustrie
 Financial Controlling & Management Reporting für Hotelketten
 Payroll-Planung (Desktop-based)
 Gewinn-Verlust-Planung für Budgeting & Forecasting (Web-based)
 Konsolidierung (Web-based)

7. Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
Die Herausforderungen

8. @RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
FairPlanner
 Web-based
 Multi-Tenancy Architecture
 Software-as-a-Service (SaaS)
 IAM: proprietär

9. @RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
FairPayroll FairChainFairPlanner
 Desktop-based
 Single-Tenancy
 On-Prem Installationen
 IAM: proprietär
 Web-based
 Multi-Tenancy
 IAM: proprietär

10. @RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
Server Instance
(Instances managed by Fairmas)
Server Instance 2
(Instances managed by Fairmas)
Server Instance 3
(Instances managed by Fairmas)
Server Instance 4
(Instances managed by Fairmas)
Server Instance 5
(Instances managed by Fairmas)
 Viele Server-Instanzen
 Skalierung, Staging etc.
 Jede Instanz hat eigene
User-DB
 Supportmitarbeiter besitzen
User-Accounts für jede
Umgebung

11. @RobinSedlaczek
RobinSedlaczek.com
DIE HERAUSFORDERUNGEN
 Viele Server-Instanzen
 On-Prem / Off-Prem
Server Instance 1
(Instances managed by Fairmas)
Server Instance 2
(Instances managed by Fairmas)
Server Instance 3
(Instances managed by Fairmas)
Server Instance 4
(Instances managed by Fairmas)
Server Instance 1
(Instances managed by Fairmas)
Server Instance 2
(Instances managed by Fairmas)
Server Instance 3
(Instances managed by Fairmas)
Server Instance 4
(Instances managed by Fairmas)
On-Premise
 „Alle“ kommunizieren miteinander
 Jedes Tool hat proprietäres IAM

12. @RobinSedlaczek
RobinSedlaczek.com
On-Premise
External Hosting Provider
(Instances managed by Fairmas)

13. Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com
Der Lösungsansatz

14. @RobinSedlaczek
RobinSedlaczek.com
DER LÖSUNGSANSATZ
1. Beratungs-Workshop zu oAuth2 & Open ID Connect
2. Implementierung Identity Server
3. Authentifizierung in allen Produkten gegen IdentityServer
4. User Sync Prozesse
5. Integration AD/AAD via Active Directory Federation Services (ADFS)

15. @RobinSedlaczek
RobinSedlaczek.com
DER LÖSUNGSANSATZ
https://tools.ietf.org/html/rfc6749#page-31

17. Identity & Access Management in der
Realität: Goodbye, „Hello World“!
Robin Sedlaczek | CTO Fairmas GmbH | .NET User Group Berlin
@RobinSedlaczek
RobinSedlaczek.com