{"id":477544,"date":"2023-08-09T09:16:28","date_gmt":"2023-08-09T09:16:28","guid":{"rendered":""},"modified":"2023-09-05T11:14:57","modified_gmt":"2023-09-05T11:14:57","slug":"identity-orchestration","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/identity-orchestration\/","title":{"rendered":"\u8eab\u4efd\u7f16\u6392"},"content":{"rendered":"<p>\u8eab\u4efd\u7f16\u6392\u662f\u7f51\u7edc\u5b89\u5168\u9886\u57df\u7684\u4e00\u4e2a\u91cd\u8981\u8fc7\u7a0b\uff0c\u662f\u5728\u7f51\u7edc\u6216\u5e94\u7528\u7a0b\u5e8f\u73af\u5883\u4e2d\u7ba1\u7406\u548c\u63a7\u5236\u7528\u6237\u8eab\u4efd\u3001\u8bbf\u95ee\u548c\u6388\u6743\u7684\u590d\u6742\u65b9\u6cd5\u3002\u5b83\u6d89\u53ca\u65e0\u7f1d\u96c6\u6210\u5404\u79cd\u8eab\u4efd\u7ba1\u7406\u7cfb\u7edf\u3001\u534f\u8bae\u548c\u5de5\u5177\uff0c\u4ee5\u786e\u4fdd\u8de8\u591a\u4e2a\u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u5b89\u5168\u9ad8\u6548\u7684\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\u3002\u901a\u8fc7\u7b80\u5316\u4e0e\u8eab\u4efd\u76f8\u5173\u7684\u6d41\u7a0b\uff0c\u7ec4\u7ec7\u53ef\u4ee5\u589e\u5f3a\u5b89\u5168\u6027\u3001\u6539\u5584\u7528\u6237\u4f53\u9a8c\u5e76\u6ee1\u8db3\u6cd5\u89c4\u9075\u4ece\u6027\u8981\u6c42\u3002<\/p>\n<h2>\u8eab\u4efd\u7f16\u6392\u7684\u8d77\u6e90\u5386\u53f2<\/h2>\n<p>\u968f\u7740\u6280\u672f\u548c\u4e92\u8054\u7f51\u7684\u8fdb\u6b65\uff0c\u8eab\u4efd\u7f16\u6392\u7684\u6982\u5ff5\u591a\u5e74\u6765\u4e0d\u65ad\u53d1\u5c55\u3002\u8eab\u4efd\u7f16\u6392\u7684\u9996\u6b21\u63d0\u53ca\u53ef\u4ee5\u8ffd\u6eaf\u5230 2000 \u5e74\u4ee3\u521d\u671f\uff0c\u5f53\u65f6\u4f01\u4e1a\u5f00\u59cb\u5e94\u5bf9\u5728\u4e0d\u65ad\u589e\u957f\u7684 IT \u57fa\u7840\u8bbe\u65bd\u4e2d\u7ba1\u7406\u7528\u6237\u8eab\u4efd\u548c\u8bbf\u95ee\u7684\u6311\u6218\u3002\u968f\u7740\u4e91\u8ba1\u7b97\u548c SaaS\uff08\u8f6f\u4ef6\u5373\u670d\u52a1\uff09\u5e94\u7528\u7a0b\u5e8f\u7684\u666e\u53ca\uff0c\u5bf9\u96c6\u4e2d\u4e14\u4e00\u81f4\u7684\u8eab\u4efd\u7ba1\u7406\u65b9\u6cd5\u7684\u9700\u6c42\u53d8\u5f97\u663e\u800c\u6613\u89c1\u3002<\/p>\n<h2>\u6709\u5173\u8eab\u4efd\u7f16\u6392\u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n<p>\u8eab\u4efd\u7f16\u6392\u6269\u5c55\u4e86\u8eab\u4efd\u7ba1\u7406\u7684\u4f20\u7edf\u6982\u5ff5\u3002\u5b83\u4e0d\u4ec5\u4ec5\u662f\u7ba1\u7406\u7528\u6237\u51ed\u8bc1\u548c\u8bbf\u95ee\u6743\u9650\uff0c\u8fd8\u6d89\u53ca\u66f4\u5168\u9762\u7684\u8eab\u4efd\u76f8\u5173\u6d41\u7a0b\u65b9\u6cd5\u3002\u8eab\u4efd\u7f16\u6392\u5e73\u53f0\u5145\u5f53\u4e2d\u4ecb\uff0c\u4fc3\u8fdb\u5404\u79cd\u8eab\u4efd\u63d0\u4f9b\u5546 (IdP)\u3001\u76ee\u5f55\u3001\u6570\u636e\u5e93\u548c\u5e94\u7528\u7a0b\u5e8f\u4e4b\u95f4\u7684\u65e0\u7f1d\u901a\u4fe1\u548c\u540c\u6b65\u3002<\/p>\n<p>\u5728\u5178\u578b\u7684\u8eab\u4efd\u7f16\u6392\u573a\u666f\u4e2d\uff0c\u5f53\u7528\u6237\u5c1d\u8bd5\u8bbf\u95ee\u670d\u52a1\u6216\u5e94\u7528\u7a0b\u5e8f\u65f6\uff0c\u7f16\u6392\u5e73\u53f0\u901a\u8fc7\u4e0e\u76f8\u5173\u8eab\u4efd\u63d0\u4f9b\u8005\u4ea4\u4e92\u6765\u5904\u7406\u8eab\u4efd\u9a8c\u8bc1\u8fc7\u7a0b\u3002\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u540e\uff0c\u5e73\u53f0\u5c06\u6839\u636e\u9884\u5b9a\u4e49\u7684\u7b56\u7565\u548c\u89d2\u8272\u6388\u6743\u7528\u6237\u7684\u8bbf\u95ee\u6743\u9650\u3002\u8fd9\u6837\uff0c\u7528\u6237\u53ef\u4ee5\u4f7f\u7528\u4e00\u7ec4\u51ed\u636e\u5b89\u5168\u5730\u8bbf\u95ee\u591a\u4e2a\u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u3002<\/p>\n<h2>\u8eab\u4efd\u7f16\u6392\u7684\u5185\u90e8\u7ed3\u6784<\/h2>\n<p>\u8eab\u4efd\u7f16\u6392\u5e73\u53f0\u7684\u5185\u90e8\u7ed3\u6784\u7531\u51e0\u4e2a\u534f\u540c\u5de5\u4f5c\u7684\u5173\u952e\u7ec4\u4ef6\u7ec4\u6210\uff0c\u4ee5\u63d0\u4f9b\u5168\u9762\u7684\u8eab\u4efd\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u8eab\u4efd\u63d0\u4f9b\u5546 (IdP)<\/strong>\uff1a\u8fd9\u4e9b\u670d\u52a1\u8d1f\u8d23\u5bf9\u7528\u6237\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u5e76\u5411\u7f16\u6392\u5e73\u53f0\u63d0\u4f9b\u8eab\u4efd\u4fe1\u606f\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7528\u6237\u76ee\u5f55<\/strong>\uff1a\u7f16\u6392\u5e73\u53f0\u4e0eActive Directory\u6216LDAP\u7b49\u7528\u6237\u76ee\u5f55\u96c6\u6210\uff0c\u4ee5\u6709\u6548\u83b7\u53d6\u7528\u6237\u4fe1\u606f\u5e76\u7ba1\u7406\u8eab\u4efd\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7b56\u7565\u5f15\u64ce<\/strong>\uff1a\u7b56\u7565\u5f15\u64ce\u5f3a\u5236\u6267\u884c\u8bbf\u95ee\u63a7\u5236\u7b56\u7565\uff0c\u786e\u5b9a\u7528\u6237\u53ef\u4ee5\u8bbf\u95ee\u54ea\u4e9b\u8d44\u6e90\u4ee5\u53ca\u53ef\u4ee5\u6267\u884c\u54ea\u4e9b\u64cd\u4f5c\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8054\u90a6\u534f\u8bae<\/strong>\uff1a\u8eab\u4efd\u7f16\u6392\u4f9d\u8d56\u4e8e SAML\uff08\u5b89\u5168\u65ad\u8a00\u6807\u8bb0\u8bed\u8a00\uff09\u548c OAuth \u7b49\u6807\u51c6\u8054\u5408\u534f\u8bae\u6765\u5b9e\u73b0\u4e0d\u540c\u670d\u52a1\u4e4b\u95f4\u7684\u5b89\u5168\u901a\u4fe1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\u670d\u52a1<\/strong>\uff1a\u8fd9\u4e9b\u670d\u52a1\u5904\u7406\u7528\u6237\u7684\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\uff0c\u786e\u4fdd\u5bf9\u53d7\u4fdd\u62a4\u8d44\u6e90\u7684\u5b89\u5168\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u8eab\u4efd\u7f16\u6392\u7684\u5173\u952e\u7279\u5f81\u5206\u6790<\/h2>\n<p>\u8eab\u4efd\u7f16\u6392\u63d0\u4f9b\u4e86\u51e0\u4e2a\u5173\u952e\u529f\u80fd\uff0c\u4f7f\u5176\u6210\u4e3a\u73b0\u4ee3 IT \u57fa\u7840\u8bbe\u65bd\u7684\u91cd\u8981\u7ec4\u6210\u90e8\u5206\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u5355\u70b9\u767b\u5f55 (SSO)<\/strong>\uff1a\u7528\u6237\u53ef\u4ee5\u4f7f\u7528\u4e00\u7ec4\u51ed\u636e\u8bbf\u95ee\u591a\u4e2a\u5e94\u7528\u7a0b\u5e8f\uff0c\u7b80\u5316\u767b\u5f55\u8fc7\u7a0b\u5e76\u589e\u5f3a\u7528\u6237\u4f53\u9a8c\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u96c6\u4e2d\u8eab\u4efd\u7ba1\u7406<\/strong>\uff1a\u8eab\u4efd\u7f16\u6392\u63d0\u4f9b\u4e86\u4e00\u4e2a\u7edf\u4e00\u7684\u5e73\u53f0\u6765\u7ba1\u7406\u548c\u63a7\u5236\u6574\u4e2a\u7ec4\u7ec7\u7684\u7528\u6237\u8eab\u4efd\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u4e0e\u5408\u89c4\u6027<\/strong>\uff1a\u901a\u8fc7\u6267\u884c\u8bbf\u95ee\u7b56\u7565\u548c\u76d1\u63a7\u7528\u6237\u6d3b\u52a8\uff0c\u8eab\u4efd\u7f16\u6392\u589e\u5f3a\u4e86\u5b89\u5168\u6027\u5e76\u6709\u52a9\u4e8e\u6ee1\u8db3\u6cd5\u89c4\u9075\u4ece\u6027\u8981\u6c42\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u53ef\u6269\u5c55\u6027<\/strong>\uff1a\u8be5\u5e73\u53f0\u53ef\u4ee5\u5904\u7406\u5927\u91cf\u7528\u6237\u548c\u5e94\u7528\u7a0b\u5e8f\uff0c\u9002\u5408\u5404\u79cd\u89c4\u6a21\u7684\u4f01\u4e1a\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u8eab\u4efd\u7f16\u6392\u7684\u7c7b\u578b<\/h2>\n<p>\u8eab\u4efd\u7f16\u6392\u89e3\u51b3\u65b9\u6848\u53ef\u80fd\u4f1a\u6839\u636e\u5176\u90e8\u7f72\u6a21\u578b\u548c\u63d0\u4f9b\u7684\u670d\u52a1\u800c\u6709\u6240\u4e0d\u540c\u3002\u4ee5\u4e0b\u662f\u8eab\u4efd\u7f16\u6392\u7684\u4e3b\u8981\u7c7b\u578b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u672c\u5730\u8eab\u4efd\u7f16\u6392<\/td>\n<td>\u90e8\u7f72\u5728\u7ec4\u7ec7\u7684\u6570\u636e\u4e2d\u5fc3\u5185\uff0c\u63d0\u4f9b\u5bf9\u57fa\u7840\u8bbe\u65bd\u548c\u6570\u636e\u7684\u5b8c\u5168\u63a7\u5236\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u57fa\u4e8e\u4e91\u7684\u8eab\u4efd\u7f16\u6392<\/td>\n<td>\u6258\u7ba1\u5728\u4e91\u4e2d\uff0c\u63d0\u4f9b\u53ef\u6269\u5c55\u6027\u3001\u6613\u4e8e\u5b9e\u65bd\u5e76\u51cf\u5c11\u7ef4\u62a4\u5de5\u4f5c\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6df7\u5408\u8eab\u4efd\u7f16\u6392<\/td>\n<td>\u7ed3\u5408\u672c\u5730\u548c\u57fa\u4e8e\u4e91\u7684\u89e3\u51b3\u65b9\u6848\uff0c\u4f7f\u7ec4\u7ec7\u80fd\u591f\u5e73\u8861\u5b89\u5168\u6027\u548c\u7075\u6d3b\u6027\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4f7f\u7528\u8eab\u4efd\u7f16\u6392\u7684\u65b9\u6cd5\uff1a\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848<\/h2>\n<p>\u7ec4\u7ec7\u53ef\u4ee5\u5229\u7528\u8eab\u4efd\u7f16\u6392\u6765\u5e94\u5bf9\u4e0e\u8eab\u4efd\u7ba1\u7406\u76f8\u5173\u7684\u5404\u79cd\u6311\u6218\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u7528\u6237\u914d\u7f6e\u548c\u53d6\u6d88\u914d\u7f6e<\/strong>\uff1a\u8eab\u4efd\u7f16\u6392\u53ef\u81ea\u52a8\u6267\u884c\u6388\u4e88\u6216\u64a4\u9500\u8d44\u6e90\u8bbf\u95ee\u6743\u9650\u7684\u8fc7\u7a0b\uff0c\u4ece\u800c\u964d\u4f4e\u672a\u7ecf\u6388\u6743\u8bbf\u95ee\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8eab\u4efd\u8054\u5408<\/strong>\uff1a\u4fc3\u8fdb\u8de8\u4e0d\u540c\u7cfb\u7edf\u7684\u5b89\u5168\u8ba4\u8bc1\u548c\u6388\u6743\uff0c\u5b9e\u73b0\u7528\u6237\u7684\u65e0\u7f1d\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u91cd\u8eab\u4efd\u9a8c\u8bc1 (MFA)<\/strong>\uff1a\u5c06 MFA \u4e0e\u8eab\u4efd\u7f16\u6392\u96c6\u6210\uff0c\u901a\u8fc7\u6dfb\u52a0\u989d\u5916\u7684\u7528\u6237\u9a8c\u8bc1\u5c42\u6765\u589e\u5f3a\u5b89\u5168\u6027\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u7136\u800c\uff0c\u5b9e\u65bd\u8eab\u4efd\u7f16\u6392\u53ef\u80fd\u4f1a\u9047\u5230\u96c6\u6210\u590d\u6742\u6027\u3001\u8fc1\u79fb\u8fc7\u7a0b\u4e2d\u6f5c\u5728\u505c\u673a\u4ee5\u53ca\u7ef4\u62a4\u4e0e\u73b0\u6709\u7cfb\u7edf\u7684\u517c\u5bb9\u6027\u7b49\u6311\u6218\u3002\u4e3a\u4e86\u514b\u670d\u8fd9\u4e9b\u95ee\u9898\uff0c\u7ec4\u7ec7\u5e94\u4ed4\u7ec6\u89c4\u5212\u90e8\u7f72\uff0c\u8fdb\u884c\u5f7b\u5e95\u7684\u6d4b\u8bd5\uff0c\u5e76\u786e\u4fdd\u5bf9\u7ba1\u7406\u5458\u8fdb\u884c\u9002\u5f53\u7684\u57f9\u8bad\u3002<\/p>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u540c\u7c7b\u4ea7\u54c1\u6bd4\u8f83<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u8eab\u4efd\u7ba1\u7406<\/td>\n<td>\u4e3b\u8981\u5173\u6ce8\u7528\u6237\u914d\u7f6e\u3001\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\u3002\u8eab\u4efd\u7f16\u6392\u6269\u5c55\u4e86\u8fd9\u4e9b\u529f\u80fd\uff0c\u63d0\u4f9b\u4e86\u66f4\u5168\u9762\u7684\u89e3\u51b3\u65b9\u6848\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8bbf\u95ee\u7ba1\u7406<\/td>\n<td>\u4e13\u6ce8\u4e8e\u63a7\u5236\u7528\u6237\u5bf9\u8d44\u6e90\u7684\u8bbf\u95ee\u3002\u8eab\u4efd\u7f16\u6392\u4e0d\u4ec5\u5305\u62ec\u8bbf\u95ee\u7ba1\u7406\uff0c\u8fd8\u5305\u62ec\u8eab\u4efd\u8054\u5408\u548c SSO\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5355\u70b9\u767b\u5f55 (SSO)<\/td>\n<td>\u8eab\u4efd\u7f16\u6392\u7684\u4e00\u9879\u529f\u80fd\uff0c\u4f7f\u7528\u6237\u80fd\u591f\u4f7f\u7528\u4e00\u7ec4\u51ed\u636e\u8bbf\u95ee\u591a\u4e2a\u5e94\u7528\u7a0b\u5e8f\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u8eab\u4efd\u7f16\u6392\u7684\u524d\u666f\u548c\u672a\u6765\u6280\u672f<\/h2>\n<p>\u968f\u7740\u4f01\u4e1a\u8d8a\u6765\u8d8a\u591a\u5730\u91c7\u7528\u57fa\u4e8e\u4e91\u7684\u670d\u52a1\u548c\u6df7\u5408\u57fa\u7840\u8bbe\u65bd\uff0c\u8eab\u4efd\u7f16\u6392\u7684\u672a\u6765\u5145\u6ee1\u5e0c\u671b\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u672a\u6765\u6f5c\u5728\u7684\u53d1\u5c55\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u673a\u5668\u5b66\u4e60\u96c6\u6210<\/strong>\uff1a\u7ed3\u5408\u673a\u5668\u5b66\u4e60\u7b97\u6cd5\u6765\u68c0\u6d4b\u548c\u9632\u6b62\u4e0e\u8eab\u4efd\u76f8\u5173\u7684\u5a01\u80c1\uff0c\u4f8b\u5982\u8eab\u4efd\u76d7\u7a83\u548c\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u53bb\u4e2d\u5fc3\u5316\u8eab\u4efd<\/strong>\uff1a\u91c7\u7528\u53bb\u4e2d\u5fc3\u5316\u8eab\u4efd\u6a21\u578b\uff0c\u4f8b\u5982\u81ea\u6211\u4e3b\u6743\u8eab\u4efd\uff0c\u53ef\u63d0\u4f9b\u589e\u5f3a\u7684\u9690\u79c1\u548c\u7528\u6237\u63a7\u5236\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u96f6\u4fe1\u4efb\u67b6\u6784<\/strong>\uff1a\u8eab\u4efd\u7f16\u6392\u5c06\u5728\u5b9e\u65bd\u96f6\u4fe1\u4efb\u5b89\u5168\u6a21\u578b\u3001\u786e\u4fdd\u6301\u7eed\u9a8c\u8bc1\u8bbf\u95ee\u4ee5\u53ca\u57fa\u4e8e\u5b9e\u65f6\u4e0a\u4e0b\u6587\u7684\u6388\u6743\u65b9\u9762\u53d1\u6325\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4ee3\u7406\u670d\u52a1\u5668\u5982\u4f55\u4e0e Identity Orchestration \u5173\u8054<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u5728\u652f\u6301\u8eab\u4efd\u7f16\u6392\u8ba1\u5212\u65b9\u9762\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002\u5b83\u4eec\u5145\u5f53\u5ba2\u6237\u548c\u8d44\u6e90\u4e4b\u95f4\u7684\u4e2d\u4ecb\uff0c\u63d0\u9ad8\u5b89\u5168\u6027\u548c\u6027\u80fd\u3002\u4ee3\u7406\u53ef\u4ee5\uff1a<\/p>\n<ul>\n<li>\n<p><strong>\u5b89\u5168\u901a\u8baf<\/strong>\uff1a\u4ee3\u7406\u53ef\u4ee5\u5904\u7406\u6d41\u91cf\u7684\u52a0\u5bc6\u548c\u89e3\u5bc6\uff0c\u786e\u4fdd\u7528\u6237\u548c\u5e94\u7528\u7a0b\u5e8f\u4e4b\u95f4\u7684\u5b89\u5168\u6570\u636e\u4f20\u8f93\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8eab\u4efd\u8f6c\u53d1<\/strong>\uff1a\u4ee3\u7406\u53ef\u4ee5\u5c06\u8eab\u4efd\u4fe1\u606f\u8f6c\u53d1\u5230\u7f16\u6392\u5e73\u53f0\uff0c\u534f\u52a9\u7528\u6237\u8fdb\u884c\u8ba4\u8bc1\u548c\u6388\u6743\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8d1f\u8f7d\u5747\u8861<\/strong>\uff1a\u901a\u8fc7\u5728\u591a\u4e2a\u670d\u52a1\u5668\u4e4b\u95f4\u5206\u914d\u6d41\u91cf\uff0c\u4ee3\u7406\u53ef\u4ee5\u589e\u5f3a\u7cfb\u7edf\u6027\u80fd\u548c\u53ef\u9760\u6027\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173 Identity Orchestration \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li>\n<p><a href=\"https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-63b.pdf\" target=\"_new\" rel=\"noopener nofollow\">NIST \u7279\u522b\u51fa\u7248\u7269 800-63\uff1a\u6570\u5b57\u8eab\u4efd\u6307\u5357<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.gartner.com\/en\/documents\/3962074\/identity-orchestration-reducing-complexity-in-identity-\" target=\"_new\" rel=\"noopener nofollow\">\u8eab\u4efd\u7f16\u6392\uff1a\u964d\u4f4e\u8eab\u4efd\u7ba1\u7406\u7684\u590d\u6742\u6027 (Gartner)<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.ibm.com\/cloud\/learn\/cloud-identity-orchestration\" target=\"_new\" rel=\"noopener nofollow\">\u4e91\u8eab\u4efd\u7f16\u6392\uff1a\u8eab\u4efd\u548c\u8bbf\u95ee\u7ba1\u7406\u7684\u6218\u7565\u65b9\u6cd5 (IBM)<\/a><\/p>\n<\/li>\n<\/ol>\n<p>\u8eab\u4efd\u7f16\u6392\u4f5c\u4e3a\u73b0\u4ee3 IT \u73af\u5883\u7684\u5173\u952e\u7ec4\u6210\u90e8\u5206\u4e0d\u65ad\u53d1\u5c55\uff0c\u4e3a\u7ec4\u7ec7\u63d0\u4f9b\u5b89\u5168\u3001\u9ad8\u6548\u5730\u7ba1\u7406\u8eab\u4efd\u6240\u9700\u7684\u5de5\u5177\u3002\u968f\u7740\u4f01\u4e1a\u9762\u4e34\u65e5\u76ca\u590d\u6742\u7684\u7f51\u7edc\u5a01\u80c1\uff0c\u8eab\u4efd\u7f16\u6392\u5728\u4fdd\u62a4\u6570\u5b57\u8d44\u4ea7\u548c\u7528\u6237\u6570\u636e\u65b9\u9762\u7684\u4f5c\u7528\u53ea\u4f1a\u53d8\u5f97\u8d8a\u6765\u8d8a\u91cd\u8981\u3002<\/p>","protected":false},"featured_media":477545,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477544","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Identity Orchestration: A Comprehensive Guide<\/mark>","faq_items":[{"question":"What is Identity Orchestration?","answer":"<p>Identity Orchestration is a sophisticated method of managing and controlling user identities, access, and authorization within a network or application environment. It involves integrating various identity management systems, protocols, and tools to ensure secure and efficient user authentication and authorization across multiple applications and services.<\/p>"},{"question":"How did Identity Orchestration evolve?","answer":"<p>The concept of Identity Orchestration evolved in the early 2000s as businesses faced challenges in managing user identities across a growing IT infrastructure. With the rise of cloud computing and SaaS applications, the need for a centralized and cohesive approach to identity management became apparent.<\/p>"},{"question":"What does the internal structure of Identity Orchestration consist of?","answer":"<p>The internal structure of Identity Orchestration includes key components like Identity Providers (IdPs), user directories, a policy engine, federation protocols, and authentication and authorization services. These components work together to provide a comprehensive identity management solution.<\/p>"},{"question":"What are the key features of Identity Orchestration?","answer":"<p>Identity Orchestration offers several key features, including Single Sign-On (SSO) for simplified access, centralized identity management, enhanced security and compliance, and scalability to handle a large number of users and applications.<\/p>"},{"question":"What types of Identity Orchestration exist?","answer":"<p>There are three main types of Identity Orchestration: On-Premises Identity Orchestration, Cloud-Based Identity Orchestration, and Hybrid Identity Orchestration. Each type offers distinct deployment options and benefits.<\/p>"},{"question":"How can Identity Orchestration help with user provisioning and de-provisioning?","answer":"<p>Identity Orchestration automates the process of granting or revoking user access to resources, reducing the risk of unauthorized access. It ensures that users have appropriate access based on their roles and responsibilities.<\/p>"},{"question":"What are the challenges in implementing Identity Orchestration?","answer":"<p>Implementing Identity Orchestration may encounter challenges like integration complexities, potential downtime during migration, and maintaining compatibility with existing systems. Proper planning, testing, and training for administrators can help overcome these issues.<\/p>"},{"question":"How does Identity Orchestration compare to Identity Management and Access Management?","answer":"<p>Identity Orchestration expands on the concepts of Identity Management and Access Management. While Identity Management focuses on user provisioning, authentication, and authorization, Identity Orchestration offers a more comprehensive solution, including identity federation and Single Sign-On (SSO).<\/p>"},{"question":"What are the future perspectives of Identity Orchestration?","answer":"<p>The future of Identity Orchestration looks promising with the integration of machine learning for enhanced security, adoption of decentralized identity models for privacy and control, and implementation of zero-trust security models for continuous verification.<\/p>"},{"question":"How are proxy servers associated with Identity Orchestration?","answer":"<p>Proxy servers play a crucial role in supporting Identity Orchestration by acting as intermediaries between clients and resources. They enhance security, forward identity information, and aid in load balancing for improved system performance.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477544\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/477545"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=477544"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}