...

• Identity Services implement authentication methods and access to Identity Providers. For example, for example credentials such as user account/password are used as an authentication method to access an LDAP Directory Service as the Identity Provider.
• The JS7 supports a number of Identity Services:
  • Build-in Identity Services

    • Display feature availability
      StartingFromRelease 2.2.0

       
      • JS7 - JOC Identity Service, see 

        Jira
        server SOS JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 6dc67751-9d67-34cd-985b-194a8cdc9602 key JOC-1148

      • JS7 - LDAP Identity Service, see 

        Jira
        server SOS JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 6dc67751-9d67-34cd-985b-194a8cdc9602 key JOC-1147

  • External Identity Services

    • Display feature availability
      StartingFromRelease 2.2.0

      • JS7 - HashiCorp® Vault Identity Service, see 

        Jira
        server SOS JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 6dc67751-9d67-34cd-985b-194a8cdc9602 key JOC-1146

    • Display feature availability
      StartingFromRelease 2.3.0

      • Keycloak®, see 

        Jira
        server SOS JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 6dc67751-9d67-34cd-985b-194a8cdc9602 key JOC-1193

...

• Built-in Identity Services ship with the JOC Cockpit and can be used out-of-the-box.
• The JS7 - JOC Identity Service for local user management does not include elaborated features such as password recovery, password complexity constraints, password rotation etc. and is not intended for such purposes. Instead, this Identity Service is a starting point for users who operate JS7 for testing purposes.
• The JS7 - LDAP Identity Service typically offers such features from an Identity Provider such as Active Directory.

...

User Account and Role Management

Permissions Finely-grained permissions are available at a fine-grained level for access to the JOC Cockpit functionalityfunctions, see JS7 - Default Roles and Permissions. 

Permissions and roles are managed with the JOC Cockpit. User accounts and role assignments can be managed with the JOC Cockpit or with external Identity Services, see JS7 - Management of User Accounts, Roles and Permissions for more information.

Use of Identity Services

A number of Identity Services can be used at the same time:

...

• The client (Browser Client, REST API Client) challenges the JOC Cockpit server to present its Server Authentication Certificate that is then verified by the client.
• The JOC Cockpit server challenges the client to present its Client Authentication Certificate that is then verified by the JOC Cockpit.

With When the JOC Cockpit being is set up for mutual authentication, certificates can be used to:

• to enforce two-factor authentication with clients having to provide a certificate and a password,
• to allow single-factor authentication using a certificate instead of  user account/password.
  
  

...