Hi all,

Within Message Broker, there is an extension point to connect to an
external identity provider (IdP) to authenticate and authorise users.

As an initial implementation, we are planning to write a WSO2 IS connector
for this [1]. This way we would be able to front different user directory
systems (OpenLDAP, AD etc) through IS and give the user the option to
manage them through IS.

We will be using the following admin services to implement
MB MandatoryAccessController [2], UserStore interfaces [3] that are needed
to fulfil this requirement.

   - RemoteUserStoreManagerServiceStub
   - RemoteAuthorizationManagerServiceStub

[1]
https://github.com/ballerina-platform/ballerina-message-broker/issues/526
[2]
https://github.com/ballerina-platform/ballerina-message-broker/blob/master/modules/broker-auth/src/main/java/io/ballerina/messaging/broker/auth/authorization/MandatoryAccessController.java
[3]
https://github.com/ballerina-platform/ballerina-message-broker/blob/master/modules/broker-auth/src/main/java/io/ballerina/messaging/broker/auth/authorization/UserStore.java

Regards,
Asitha

-- 
*Asitha Nanayakkara* <http://asitha.github.io/>
Associate Technical Lead
WSO2, Inc. <http://wso2.com/>
Mob: +94 77 853 0682
[image: https://wso2.com/signature] <https://wso2.com/signature>
_______________________________________________
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to