Evolveum’s Identity Management and Governance Blog

Transitive closure and matrix multiplication in identity management

Posted on by Pavol Mederly

MidPoint development of is full of interesting software problems – be it management of long-running tasks, integration of third-party workflow engine, devising a flexible authorization mechanism, creating a GUI that adapts to the customizable data model, or many others. However, the following one in particular reminded me of my happy student years at the faculty Read more about Transitive closure and matrix multiplication in identity management[…]

Provisioning Random sAMAccountName Value

Posted on by Ivan Noris

Sometimes the customer requirements are very interesting, such as generating random attribute values. In this case I will show you how midPoint can generate random sAMAccountName attribute value for Microsoft Active Directory (AD) account provisioning. Although you can let the Active Directory to generate sAMAccountName just by omitting any value when creating a new account, Read more about Provisioning Random sAMAccountName Value[…]

Storing Extended Attributes in System Configuration

Posted on by Ivan Noris

Customers usually have different deployment environments such as production, testing and development. The names and number of the environments may vary of course. If you want to maintain the configuration in XML files for revision control, you will most probably need to maintain multiple copies of (almost) the same configuration, mappings etc. Can we do Read more about Storing Extended Attributes in System Configuration[…]

Unique E-mail Address Value

Posted on by Ivan Noris

Some time ago we’ve discussed how to generate e-mail address for resource target attribute. But almost everytime you would need to store user’s e-mail address in midPoint to push it anywhere you need. So we need to enter the value in midPoint (we have fancy “emailAddress” attribute handy) and let the resource schema handling mappings Read more about Unique E-mail Address Value[…]

Project Provisioning with MidPoint

Posted on by Radovan Semancik

Evolveum midPoint is a very unique Identity Management (IDM) system. MidPoint is a robust open source provisioning solution. Being an open source the midPoint is developed in a fairly rapid, incremental and iterative fashion. And the recent version introduced a capability that allows midPoint to reach beyond the traditional realm of identity management. Of course, Read more about Project Provisioning with MidPoint[…]

The Old IDM Kings Are Dead. Long Live the New Kings.

Posted on by Radovan Semancik

It can be said that Identity Management (IDM) was born in early 2000s. That was the time when many people realized that a single big directory just won’t do it. They realized that something different was needed to bring order into the identity chaos. That was the dawn of a user provisioning system. Early market Read more about The Old IDM Kings Are Dead. Long Live the New Kings.[…]

Five Practical Ways to Ruin Your IAM Project

Posted on by Radovan Semancik

Identity and Access Management projects are very common nowadays. The interesting fact is that too many of them either vastly under-deliver or totally fail. I have been fighting in the IAM trenches for many long years and I have seen both successful and failed projects. It looks like to me that the IAM projects are Read more about Five Practical Ways to Ruin Your IAM Project[…]

Why do I prefer IntelliJ IDEA?

Posted on by Evolveum

Before using IntelliJ IDEA, I used to work with another IDE, Eclipse. After some issues with tomcat configuration, my colleagues suggested using IDEA as a development tool for our project, MidPoint. Of course, the process of transformation from one IDE to another is always a little painful, but after some help from my colleagues and Read more about Why do I prefer IntelliJ IDEA?[…]

Sun IdM to midPoint migration (case study)

Posted on by Evolveum

We would like to announce that one of several ongoing migrations from Sun IdM to midPoint has successfully finished. It was done by our partner AMI Praha. They published interesting article describing their deployment, unfortunately only in Czech language, available at nasazeni-idm-midpoint-v-ami-praha. We would like to highlight that it is a typical deployment for a Read more about Sun IdM to midPoint migration (case study)[…]