Identity Management - Keyrock GELesson 5 - Installing Keyrock in your own infrastructure

Álvaro Alonso. UPM – DITSecurity Chapter. FIWAREaalonsog@dit.upm.es, @larsonalonso

Contents

1. Keyrock architecture

2. Installing and configuring your own instance

Keyrock architecture

• Horizon– Fron-end component– User views

• Keystone– Back-end component– Resources management– Connection to data base

Horizon

Keystone

DB

Keyrock extended architecture

• Horizon– Fron-end component– User views

• Keystone– Back-end component– Resources management– Connection to data base

• AuthZForce– Permissions management– PAP and PDP

Horizon

Keystone

DB

AuthZForce

DB

Horizon

Openstack Horizon

FIWARE UI

AuthZForce Driver

OAuth2 Driver

FIWARE Accounts Admin toolsreCaptcha

Keystone

Openstack Keystone

Keystone APISCIM 2.0

User RegistrationTwo factor auth

OAuth2

Installing Horizon and Keystone

• Quick installation guide– http://fiware-idm.readthedocs.io/en/latest/introduction.html#how-to-buil

d-install

• Detailed installation guide– http://fiware-idm.readthedocs.io/en/latest/admin_guide.html#step-by-ste

p-installation

Identity Management - Keyrock GELesson 5 - Installing Keyrock in your own infrastructure

Álvaro Alonso. UPM – DITSecurity Chapter. FIWAREaalonsog@dit.upm.es, @larsonalonso