Identity and Access Management - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

Identity and Access Management (IAM) allows you to leverage SAML-based Web Single Sign-On (SSO) and OAuth API authorization in Address Manager.

With SAML-based Web SSO in Address Manager, all user login credentials are authenticated by the Identity Provider (IdP). Address Manager supports both SP-initiated SSO and IdP-inititated SSO. For more information on how SAML works with Address Manager, refer to Single Sign-On.

The OAuth API authorization allows access to Address Manager API endpoints using OAuth 2.0 authorization grants:
  • Authorization Code Grant
  • Implicit Grant
  • Resource Owner Password Credentials Grant
  • Client Credentials Grant
The OAuth 2.0 specification defines an authorization protocol (a protocol that is focused on what actors have access to—not who the actor is) and includes four actors: the Resource Owner (the user), the Client (an application or script that needs access to the Address Manager API), the Authorization Server (OAuth2 Server, OpenID Connect), and the Resource Server (Address Manager API). The Client Credentials Grant is used for client-to-service (machine-to-machine) communication where no end user is involved in the authentication flow. For more information on how OAuth works with Address Manager, refer to OAuth API authorization.
Note: SSO for DNS Edge is not related to SSO for Address Manager. DNS Edge must be configured separately as a service provider on your IdP.