Aperçu des sections

• Securing Your Environment with Authentication and Authorization

  Securing Your Environment with Authentication and Authorization

  Content Type
  Video

  Duration
  45m

  Level
  Intermediate

  See how to configure and maintain authentication and authorization via the Management Portal in this video series. Authentication and authorization are key components for securing your InterSystems Caché® and InterSystems Ensemble® environment and applications.

  Authentication establishes the identity of people or devices connecting to your applications. In other words, this is how you prove you are who you say you are.

  Authorization controls what users can view, use, or alter in your application based on the roles they are assigned.
• Videos

  Videos
  • PageAuthentication (9m)

    Users and devices connecting to Caché or Ensemble must be authenticated to verify their identity. The Management Portal can be used to allow a variety of authentication methods as well as configure them for connectivity services. Authentication methods available include:
    

    1. Kerberos
    2. Operating System login
    3. Caché login
    4. LDAP
    5. Delegated
    6. Two-factor
    7. Unauthenticated

  • PageIntroduction to Authorization (5m)

    Once users are authenticated, they are then authorized to access various assets. These assets include databases, connection services, system functions, and user applications. Resources and roles are then assigned to assets and users for authorization.
    

  • PageResources and Roles (12m)

    In securing your environment, you will first need to create resources and roles. Resources protect assets by granting Read, Write, or Use permission, while roles are collections of the resources granting this privileged access.
    

  • PageUsers (8m)

    Once you have set up resources and roles, users can be created and assigned to their appropriate roles. The roles for a given user define what assets the user has access to and what the permissions are for those assets
    

  • PageResource-based Services (6m)

    Resource-based services control user access to Caché. Basic services control communication between Caché servers. Enabling these services permits appropriate communication and connection. Assign users to appropriate resources to allow connection.
    

  • PageApplications (8m)

    Web, client, and privileged routines can escalate the roles of a user once they have been authenticated and assigned their initial authorization. This minimizes initial privileges and gives the application complete control over the resources it uses.
    

  • PageSQL (6m)

    In addition to resources and roles, SQL privileges can be assigned to users so they can access the tables in a namespace. These privileges can restrict users' access to columns, rows, views, and procedures.
    

  • PageDeepSee (7m)

    DeepSee assets can be protected by the supplied DeepSee resources as well as custom, database, and SQL resources.
    

  • PageManagement Portal (5m)

    Each page of the Management Portal is secured with an administrative resource. Users must have Use permission for the appropriate resource to view the page. You can assign custom resources to a page for further security.
    

• Summary

  Summary

  You have now learned how to secure your Caché/Ensemble environment using authentication and authorization via the Management Portal. Authentication allows users to validate their identities, while authorization controls access to applications, SQL tables, Management Portal pages, and more. You saw that there are several ways of authenticating people and devices connecting to your environment, including Kerberos, OS log in, Caché log in, and more. Meanwhile, resources and roles are the heart of authorization.