FirstClass account automation

•Download as PPTX, PDF•

0 likes•695 views

Presentation given by Gary Falcon of Aptiris on how to automate creation of accounts for FirstClass, authenticate against Active Directory or LDAP, and leverage existing FirstClass data for external systems.

Technology

FirstClass Account
Automation
Gary Falcon
October 2, 2012

Goals
 What is possible
 What components
& tools to use

X Step-by-step
installation
X Troubleshooting
server-specific
problems

Where are we going?

1. Using FC directory
outside FirstClass

2. External
authentication

3. Account provisioning

Topic 1

USING THE FIRSTCLASS
DIRECTORY OUTSIDE
FIRSTCLASS

Approaches
 LDAP: Internet
Services

 LDAP: Directory
Services

 Data files / ODBC:
Application Services

Why?
 Spam filters
 Web app
authentication
 Network copiers
 PHP applications
 Populate external
systems

LDAP: Internet Services
[Show Config]
 Basic Internet Setup
 Advanced Directory
 LDAP Browser

LDAP: Directory Services
[Config Highlights]
 Directory Setup
 Port, root DN
 Show/Replicate
 Replication > Filtering

LDAP Comparison
Internet Services Directory Services
 Authenticate with UserID  Authenticate with LDAP DN
 All directory objects  Choice of directory objects
using BaseDN
 Global directory only  User contacts
 ClientID as UID  UserID as UID
 Less configurable  More configurable
 LDAP-format DN

Data Exchange Files / ODBC
 Build in FCAS

 Custom built: export
exactly what is required

 Automate schedule

 Write to text file or ODBC
data source

Which to use?
1. Internet Services LDAP: First choice

2. Directory Services LDAP: When #1
doesn’t provide necessary attributes
or function

3. Application Services: When LDAP
functions aren’t available

Why?
 Easier for end-users
 Convenient for
administrators
 Low risk
 High reward

Authentication Workflow
Client User ID &
Password
FCS
FCDS
yes LDAP no
controlled?

yes FCDS no
avail?

yes AD no
avail?

yes Valid
Valid no login?
login?

yes no

Cache data
in FCS Username
Log user in
or PW error

Authentication: Configuration
[Config Highlights]
 Operation mode: LDAP
 Auth method: Remote
 LDAP Server: required
 Gateway: filtering
 Change password: off

Challenges
 Requires SSL for web
logins

 Most recent FCDS may
not allow saved
passwords

FCDS Provisioning
 Works with AD, OpenLDAP
 With or without
authentication
 Account adds / removes /
changes
 Creates groups from OUs
 Matches to sAMAccount
Name (AD) or DN (LDAP)
 One-way replication

Provisioning: Configuration
[Config Highlights]
 Operation mode: LDAP
or Replication
 Enable delete: OFF
 Set schedule
 Test in non-production
environment

Challenges
 OU structure vs/
FirstClass groups

 AD Groups are not
replicated

 Will delete your
directory if you tell it to

Custom Provisioning
 Data can be brought in
from any system
 Handles account adds /
removes / changes
 Flexible handling of group
associations
 Custom apps can follow
any required logic
 Provisioning only; no
authentication

Getting Help
 Limited support from FirstClass
 Aptiris can assist with:
 Support (for Aptiris clients)
 Implementation services
 Ad-hoc consultation
 info@aptiris.com / 877.864.3534

Thank you!

Gary Falcon
gfalcon@aptiris.com

What's hot

It114 Configuring SharePoint 2010 User Profile SyncSpencer Harbar

Migrating Legacy On-Premise Applications to SharePoint Online and Windows AzureEric Shupps

Decoupled cms sunshinephp 2014Lukas Smith

SharePoint Connections Coast to Coast Developer Boot Camp Crash Course v3Ivan Sanders

Service-Oriented ArchitectureSamantha Geitz

Deploy and Configure an Enterprise Root CA & Subordinate CA in Windows Server...Md. Abdul Barek

Office 365-single-sign-on-with-adfsamitchachra

Oracle Alta UI Patterns for Enterprise Applications and Responsive UI Supportandrejusb

Session 7 - Integrating share point with silverlight firestarterMithun T. Dhar

Office 365 identityMotty Ben Atia

Back to the Basics - 1 - Introduction to Web DevelopmentClint LaForest

FormstackKadharBashaJ

What's hot (12)

It114 Configuring SharePoint 2010 User Profile Sync

Migrating Legacy On-Premise Applications to SharePoint Online and Windows Azure

Decoupled cms sunshinephp 2014

SharePoint Connections Coast to Coast Developer Boot Camp Crash Course v3

Service-Oriented Architecture

Deploy and Configure an Enterprise Root CA & Subordinate CA in Windows Server...

Office 365-single-sign-on-with-adfs

Oracle Alta UI Patterns for Enterprise Applications and Responsive UI Support

Session 7 - Integrating share point with silverlight firestarter

Office 365 identity

Back to the Basics - 1 - Introduction to Web Development

Formstack

Viewers also liked

Ch 25 ppp, with breakoutspsmccully

Ch 1 ppp, v7 with groupspsmccully

$C:\fakepath\slide show oct$ $C:\fakepath\slide show oct$

C:\fakepath\slide show octMs. Malone

Byzantine documenthiren1234

Poem: Civilization and IPR (Basic concepts of IPR)Pankaj Kumar

Ch 2 ppp, vol 7psmccully

Career opportunities in Patents and other IPRPankaj Kumar

Edsby aptiris 01-2014aptiris

Diapositivasalxmaku

Fundations soundsMs. Malone

Preparing for first class 12aptiris

Requirement Engineering in Agile Global Software DevelopmentMohammad Anggasta Paramartha

ศาสนาพราหมณ์sorrachat keawjam

Patent & other IPR concerns in Pharma, Chemical, Biotech etcPankaj Kumar

IPR outreachPankaj Kumar

Design and Instantiation of Reference Architecture for Pluggable Service Plat...Mohammad Anggasta Paramartha

Viewers also liked (16)

Ch 25 ppp, with breakouts

Ch 1 ppp, v7 with groups

$C:\fakepath\slide show oct$ $C:\fakepath\slide show oct$

C:\fakepath\slide show oct

Byzantine document

Poem: Civilization and IPR (Basic concepts of IPR)

Ch 2 ppp, vol 7

Career opportunities in Patents and other IPR

Edsby aptiris 01-2014

Diapositivas

Fundations sounds

Preparing for first class 12

Requirement Engineering in Agile Global Software Development

ศาสนาพราหมณ์

Patent & other IPR concerns in Pharma, Chemical, Biotech etc

IPR outreach

Design and Instantiation of Reference Architecture for Pluggable Service Plat...

Similar to FirstClass account automation

Ldap2010CYJ

MongoDB.local Sydney: MongoDB Atlas for Your EnterpriseMongoDB

CFF Preso- LDifEditorrajathshanbag

Understanding Office 365’s Identity Solutions: Deep Dive - EPC GroupEPC Group

O365con14 - moving from on-premises to online, the road to followNCCOMMS

Configuring Domino To Be An Ldap Directory And To Use An Ldap DirectoryEdson Oliveira

LDAPLokesh Kumar N

Cause 2013: A Flexible Approach to Creating an Enterprise Directoryrwgorrel

Where should I be encrypting my data? Information Technology Society Nepal

MongoDB.local Dallas 2019: MongoDB Atlas for Your EnterpriseMongoDB

A Technical Guide To Deploying Single Sign OnGabriella Davis

E brochure it254_actived2012I-r Papa

Oracle 11i OID AD IntegrationMahesh Vallampati

Chapter_11_LDAP_and_Kerberos-converted.pptxahmedsayed947221

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?Scott Hoag

SYDSP - Office 365 and Cloud Identity - What does it mean for me?Scott Hoag

Office 365 MCSA TechEdRobert Gabos

70 346 Managing office 365 identitiesclounoud

Directory IntroductionAidy Tificate

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365Scott Hoag

Similar to FirstClass account automation (20)

Ldap2010

MongoDB.local Sydney: MongoDB Atlas for Your Enterprise

CFF Preso- LDifEditor

Understanding Office 365’s Identity Solutions: Deep Dive - EPC Group

O365con14 - moving from on-premises to online, the road to follow

Configuring Domino To Be An Ldap Directory And To Use An Ldap Directory

LDAP

Cause 2013: A Flexible Approach to Creating an Enterprise Directory

Where should I be encrypting my data?

MongoDB.local Dallas 2019: MongoDB Atlas for Your Enterprise

A Technical Guide To Deploying Single Sign On

E brochure it254_actived2012

Oracle 11i OID AD Integration

Chapter_11_LDAP_and_Kerberos-converted.pptx

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

Office 365 MCSA TechEd

70 346 Managing office 365 identities

Directory Introduction

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

Recently uploaded

Key Features Of Token Development (1).pptxLBM Solutions

SIEMENS: RAPUNZEL – A Tale About Knowledge GraphNeo4j

New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024BookNet Canada

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticscarlostorres15106

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays

costume and set research powerpoint presentationphoebematthew05

Science&tech:THE INFORMATION AGE STS.pdfjimielynbastida

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptxnull - The Open Security Community

"Federated learning: out of reach no matter how close",Oleksandr LapshynFwdays

Bluetooth Controlled Car with Arduino.pdfngoud9212

Pigging Solutions Piggable Sweeping ElbowsPigging Solutions

DMCC Future of Trade Web3 - Special EditionDubai Multi Commodity Centre

Vulnerability_Management_GRC_by Sohang Sengupta.pptxnull - The Open Security Community

Are Multi-Cloud and Serverless Good or Bad?Mattias Andersson

Artificial intelligence in the post-deep learning eraDeakin University

Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Wonjun Hwang

Enhancing Worker Digital Experience: A Hands-on Workshop for PartnersThousandEyes

Streamlining Python Development: A Guide to a Modern Project SetupFlorian Wilhelm

Understanding the Laravel MVC ArchitecturePixlogix Infotech

Recently uploaded (20)

Key Features Of Token Development (1).pptx

SIEMENS: RAPUNZEL – A Tale About Knowledge Graph

New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...

costume and set research powerpoint presentation

Science&tech:THE INFORMATION AGE STS.pdf

Unblocking The Main Thread Solving ANRs and Frozen Frames

Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptx

"Federated learning: out of reach no matter how close",Oleksandr Lapshyn

Bluetooth Controlled Car with Arduino.pdf

Pigging Solutions Piggable Sweeping Elbows

DMCC Future of Trade Web3 - Special Edition

Vulnerability_Management_GRC_by Sohang Sengupta.pptx

Are Multi-Cloud and Serverless Good or Bad?

Artificial intelligence in the post-deep learning era

Bun (KitWorks Team Study 노별마루 발표 2024.4.22)

Enhancing Worker Digital Experience: A Hands-on Workshop for Partners

Streamlining Python Development: A Guide to a Modern Project Setup

Understanding the Laravel MVC Architecture

FirstClass account automation

1. FirstClass Account Automation Gary Falcon October 2, 2012

2. Goals  What is possible  What components & tools to use X Step-by-step installation X Troubleshooting server-specific problems

3. Where are we going? 1. Using FC directory outside FirstClass 2. External authentication 3. Account provisioning

4. Topic 1 USING THE FIRSTCLASS DIRECTORY OUTSIDE FIRSTCLASS

5. Approaches  LDAP: Internet Services  LDAP: Directory Services  Data files / ODBC: Application Services

6. Why?  Spam filters  Web app authentication  Network copiers  PHP applications  Populate external systems

7. LDAP: Internet Services [Show Config]  Basic Internet Setup  Advanced Directory  LDAP Browser

8. LDAP: Directory Services [Config Highlights]  Directory Setup  Port, root DN  Show/Replicate  Replication > Filtering

9. LDAP Comparison Internet Services Directory Services  Authenticate with UserID  Authenticate with LDAP DN  All directory objects  Choice of directory objects using BaseDN  Global directory only  User contacts  ClientID as UID  UserID as UID  Less configurable  More configurable  LDAP-format DN

10. Data Exchange Files / ODBC  Build in FCAS  Custom built: export exactly what is required  Automate schedule  Write to text file or ODBC data source

11. Which to use? 1. Internet Services LDAP: First choice 2. Directory Services LDAP: When #1 doesn’t provide necessary attributes or function 3. Application Services: When LDAP functions aren’t available

12. Topic 2 EXTERNAL AUTHENTICATION

13. Why?  Easier for end-users  Convenient for administrators  Low risk  High reward

14. What?

15. Authentication Workflow Client User ID & Password FCS FCDS yes LDAP no controlled? yes FCDS no avail? yes AD no avail? yes Valid Valid no login? login? yes no Cache data in FCS Username Log user in or PW error

16. Authentication: Configuration [Config Highlights]  Operation mode: LDAP  Auth method: Remote  LDAP Server: required  Gateway: filtering  Change password: off

17. Challenges  Requires SSL for web logins  Most recent FCDS may not allow saved passwords

18. Topic 3 ACCOUNT PROVISIONING

19. FCDS Provisioning  Works with AD, OpenLDAP  With or without authentication  Account adds / removes / changes  Creates groups from OUs  Matches to sAMAccount Name (AD) or DN (LDAP)  One-way replication

20. Provisioning: Configuration [Config Highlights]  Operation mode: LDAP or Replication  Enable delete: OFF  Set schedule  Test in non-production environment

21. Challenges  OU structure vs/ FirstClass groups  AD Groups are not replicated  Will delete your directory if you tell it to

22. Custom Provisioning  Data can be brought in from any system  Handles account adds / removes / changes  Flexible handling of group associations  Custom apps can follow any required logic  Provisioning only; no authentication

23. Getting Help  Limited support from FirstClass  Aptiris can assist with:  Support (for Aptiris clients)  Implementation services  Ad-hoc consultation  info@aptiris.com / 877.864.3534

24. Wrap-Up QUESTIONS?

25. Thank you! Gary Falcon gfalcon@aptiris.com

Editor's Notes

3 items that FirstClass requires professional services for:Platform MigrationVoice ServicesDirectory Services

FirstClass account automation

Recommended

Recommended

More Related Content

What's hot

What's hot (12)

Viewers also liked

Viewers also liked (16)

Similar to FirstClass account automation

Similar to FirstClass account automation (20)

Recently uploaded

Recently uploaded (20)

FirstClass account automation

Editor's Notes