AEM & Identity Management (IDM) Integration

© 2013 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential.

AEM & IDM | Abstracting the security layerTim Waring | Senior Consultant

Adobe


Project Background

Re-platform on AEM 5.6.1

Personalisation

My Account

Legacy system integration

IDM


IDM requirements

Protect URI

resource in AEM

sites based on

User’s roles

Share user context

among AEM and

other Java app

pools

Single sign on

&

Serve more traffic


Previous IDM setup

1. Page request

2. IDM Intercept

3. Retrieve User Profile

4. Return token

5. Set HTTP header

6. Cache response content

User iPlanet OpenSSO LDAP Site


The possible options

Deployment

Performance

Maintenance

Extensibility

Trusted HeaderReverse Proxy IntegrationLDAP Integration


The Abstracted IDM Solution – similar to SAML

1. Request secured page

2. IDM Intercept

3. Redirect Login

6. Return token

9. Set HTTP header

User Dispatch OpenSSO DAUI Publish

4. Login submit

5. Authenticate

7. Redirect to secured page

8. Validate token

CRM

10. Restful Service11. Dynamic Content


IDM Achievements

Extensibility – Easily deployed with other application modules

Maintenance – One security role structure across all applications

Deployment – Policy agents can be deployed to other applications

Performance - Achieved performance


Key implementation considerations

Where to offload

Agree Site IA

Whitelist dispatcher

Disable publish authentication

Ongoing maintenance


Questions



Tim WaringSENIOR CONSULTANT

Adobe

L27, Tower 2

201 Sussex Street

Sydney

NSW 2000

T0413 858 737

[email protected]

Technology

AEM & Identity Management (IDM) Integration