Home Database Mysql Tutorial Oracle如何处理身份管理

Oracle如何处理身份管理

Jun 07, 2016 pm 03:14 PM
oracle deal with how Safety manage identity software

对于多数安全软件先导计划,很难明确地计算投资带来的回报。这就像回头去计算某些未发生的灾难所带来的效益。然而,身份管理先导计划有所不同。由于减少了重新设置口令花费的时间,减少管理时间和增加员工生产力所带来的成本节约是清晰可见和可测量的。这些

  对于多数安全软件先导计划,很难明确地计算投资带来的回报。这就像回头去计算某些未发生的灾难所带来的效益。然而,身份管理先导计划有所不同。由于减少了重新设置口令花费的时间,减少管理时间和增加员工生产力所带来的成本节约是清晰可见和可测量的。这些成本节约可 以被测量和估计,即使破坏没有发生。2005年六月发布的最新版本的Oracle身份管理是她在三月收购Oblix后发布的首个版本。

  目录服务

  目录服务是所有身份管理努力的基础。尽管Oracle身份管理产品支持大多数最主要的目录,但是Oracle还提供其自己的目录服务。Oracle的目录服务被称为Oracle Internet Directory(OID),而且由于它将其数据存储在一个Oracle数据库中,它影响该平台的可扩缩性,可靠性,并行处理,高可用性(通过Real Application Cluster)和安全特性。用户列表会增长到数百万,而不必担心数据存储无法有效地进行扩缩。

  Oracle现在还用Oracle虚拟目录提高了虚拟目录性能,这是最近从OctetString获得的一个解决方案。这个虚拟目录性能提供了一个LDAP身份数 据视图,而不必考虑它的物理位置,因此加速了身份管理配置。

  身份和访问特性

  Oracle COREid访问和身份已经使用了七个版本。其现有消费群超过250个公司,其中一些公司管理着数百万的用户身份。除了提供包含多数访问控制产品的详细资料的单一登录性能之外,它还包括:

  动态组管理。Oracle身份管理可以根据用户属性动态地增加用户,而不是个别地按组添加用户,后者无法很好地进行扩缩。当一个用户在 组织内改变角色,组成员会自动更新,效果是以组级别的最小操作时间添加或删除权限。

  用户自助式注册,概要文件更新和口令重设。用户可以将自己添加到系统服务,使用一个内置的工作流系统开始一个批准过程。请求被自 动路由给决策者,而且在批准之后,用户被准许访问而无需获得直接的系统管理员时间。对于重设口令,用户可以使用一个共享的秘密口令进 行验证,而且系统将重设口令。

  委托管理。组织的各个部门可以通过Oracle Delegated Administration被允许管理他们自己的用户群。

  集中审计和日志记录。失败登录尝试在系统范围内被跟踪,而且一系列预构建报告可以被用来监视一致性。

  自动供给

  用户身份和他们的访问权限被集中管理后,这种控制可以通过Oracle Xellerate Identity Provisioning被扩展到数据库,应用软件和其他身份存储。Oracle身份管理的这一部分使用适配器的可扩展系统以及独特的Adapter Factory技术以向特定应用软件和系统传递访问权限,包括对主要的商业应用软件,组件和遗留系统的支持。这些适配器在当前应用软件和基础架构中保护组织的投资,在不同种类的数据中心和大多数公司拥有的系统中进行操作,并进一步平衡现有的身份管理先导计划。Oracle Xellerate Identity Provisioning是基于最近获得的Thor Technologies的Xellerate产品。其可扩缩性已经通过在一些非常广泛的供给安装中的配置得以证明。

  使用Oracle身份管理,用户和组可以被集中管理。例如,Windows域登录,Oracle金融应用软件,SAP制造业应用软件和Lotus Notes电子邮件都 可以由单独的IT组进行管理。费用节约通过在一个集中化的地点进行单一修改来实现,而不是需要所有这些系统的管理员进行修改。Oracle Xellerate Identity Provisioning在各种系统间自动同步身份数据。

  联合身份

  尽管Oracle COREid访问和身份提供的单一登录性能提供对企业内的共同资源的访问而无需重复登录,但是Oracle COREid Federation允许同一个企业对其合作伙伴的用户提供无缝的安全访问而无需重复登录。依赖行业承认的标准,例如SAML,Liberty和WS Trust,横跨不同领域的合作 伙伴或机构相互“信任”用户的证书,这些证书允许对相互的应用软件进行改进的访问。这允许每个组织独立操作并且根据商业目的进行合作 。Oracle COREid Federation的独到之处是完全从一个公司可以容易地分发给其合作伙伴的独立的软件产品中,管理多个伙伴并且从所有行业 标准联合身份解决方案中进行选择的性能。

  Web服务管理

  身份管理首先起源于在相互不同的应用软件之间集中安全的需求,所以开发者不再在构建每个应用软件时都进行编写。这使得所有应用软件的 安全能够以一种统一的方式进行管理和应用。在一个类似的方法中,Web服务管理的需求受到大家关注:单个Web服务的安全策略和管理被很好 地集中化,所以它可以在所有Web服务之间被均一地影响和普遍地应用。Oracle Web Services Manager只是完成这些,向现有的或新的Web服务 添加策略驱动的最优方法,还在配置面向服务的体系结构时提供安全和管理性能。Oracle Web Services Manager使得组织能够集中定义控制 Web服务操作(例如访问策略,记录策略和负载平衡)的策略,然后将这些策略隐藏在Web服务中而无需修改这些服务。

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Best Graphic Settings
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. How to Fix Audio if You Can't Hear Anyone
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

All software will be opened with WPS, and the exe default opening method will be restored. All software will be opened with WPS, and the exe default opening method will be restored. Jun 19, 2024 am 01:48 AM

All the software on my friend's computer has been opened using WPS and cannot run normally. All exes cannot be opened, including the task manager, registry, control panel, settings, etc. When opened, all WPS garbled characters appear. This situation cannot be done remotely. The remote software is also an exe, which seems to be unsolvable. Let’s take a look at how 20 operates to restore the computer to normal. This is because the opening method of the exe has been changed to WPS, and you only need to restore the default opening method. Er0 exports the exe registry information on a normal computer and puts it on the website. Because the browser can be opened, please guide your friends to open our website, copy the registry information, create a new text document on the desktop, and save it as [File name: 1.reg; Save type: All files (*.

How should the Java framework security architecture design be balanced with business needs? How should the Java framework security architecture design be balanced with business needs? Jun 04, 2024 pm 02:53 PM

Java framework design enables security by balancing security needs with business needs: identifying key business needs and prioritizing relevant security requirements. Develop flexible security strategies, respond to threats in layers, and make regular adjustments. Consider architectural flexibility, support business evolution, and abstract security functions. Prioritize efficiency and availability, optimize security measures, and improve visibility.

Samsung Galaxy Z Flip6 review: Simple design and practical experience, is the answer to the discounted version? ! Samsung Galaxy Z Flip6 review: Simple design and practical experience, is the answer to the discounted version? ! Jul 30, 2024 pm 12:54 PM

In the field of folding screens, small folding screens are also loved by many young users due to their lightweight, portable, exquisite and compact fashion attributes. In the previous review of the Samsung Galaxy Z Fold6 large folding screen, I gave it a "more square and more AI" evaluation. The small folding screen released at the same time, Samsung Galaxy Z Flip 6, has also attracted much attention. So what will it be like? Today, let’s unlock this new fashion product together. "Light" design: The fashionable appearance on the fingertips is the same as Galaxy Z Fold 6. The Galaxy Z Flip 6 body adopts a square design. In the unfolded state, the fuselage is slender than the average candy bar machine. The front and rear are connected by a straight-sided middle frame, and the four R corners retain a rounded shape.

PHP Microframework: Security Discussion of Slim and Phalcon PHP Microframework: Security Discussion of Slim and Phalcon Jun 04, 2024 am 09:28 AM

In the security comparison between Slim and Phalcon in PHP micro-frameworks, Phalcon has built-in security features such as CSRF and XSS protection, form validation, etc., while Slim lacks out-of-the-box security features and requires manual implementation of security measures. For security-critical applications, Phalcon offers more comprehensive protection and is the better choice.

Which wallet is safer for SHIB coins? (Must read for newbies) Which wallet is safer for SHIB coins? (Must read for newbies) Jun 05, 2024 pm 01:30 PM

SHIB coin is no longer unfamiliar to investors. It is a conceptual token of the same type as Dogecoin. With the development of the market, SHIB’s current market value has ranked 12th. It can be seen that the SHIB market is hot and attracts countless investments. investors participate in investment. In the past, there have been frequent transactions and wallet security incidents in the market. Many investors have been worried about the storage problem of SHIB. They wonder which wallet is safer for SHIB coins at the moment? According to market data analysis, the relatively safe wallets are mainly OKXWeb3Wallet, imToken, and MetaMask wallets, which will be relatively safe. Next, the editor will talk about them in detail. Which wallet is safer for SHIB coins? At present, SHIB coins are placed on OKXWe

How C++ technology promotes software security and reliability How C++ technology promotes software security and reliability Jun 02, 2024 pm 02:54 PM

C++ technology ensures software safety and reliability in the following ways: Strong type system: Prevents type conversion errors. Memory management: Fine-grained control to avoid memory leaks and corruption. Exception handling: Handle errors gracefully and maintain robustness. RAII (resource acquisition is initialization): automatically manages resources and improves reliability. Templates: Generic programming, reducing duplicate code and errors.

Comparison of PHP framework security features Comparison of PHP framework security features Jun 02, 2024 pm 08:43 PM

Comparing the security features of PHP frameworks Here is a list of the security features of the most popular PHP frameworks: Laravel: CSRF protection, XSS protection, SQL injection protection, password hashing and storage Symfony: form protection, cross-site scripting protection, security headers, firewall components CodeIgniter: CSRF protection, XSS protection, SQL injection protection (use data query to prepare statements)

How to add and manage users in Google Manager How to add and manage users in Google Manager Sep 02, 2024 pm 02:41 PM

How to add and manage users in Google Manager? Google Chrome supports multiple users to log in, so we don’t have to worry about logging in across devices. If we have many users, we need to add management. Some friends may not know how to operate. Don't worry, the editor has compiled a detailed step-by-step tutorial for everyone today. If you are interested, come and take a look with the editor. Detailed step-by-step tutorial instructions 1. After turning on the computer, find the installed Google Chrome icon on the desktop and double-click to open it, as shown in the picture below. 2. Click the three dots icon in the upper right corner of Google Chrome, as shown in the picture below. 3. Click the [Settings] option in the drop-down menu of Google Chrome, as shown in the figure below. 4. In the Google Chrome settings interface that opens, click [Manage ch

See all articles