Overview
Identity Management provides all the necessary tools to manage credentials of clients that will access API Proxies in the Apinizer platform, create access control lists (ACL), perform contract and protocol management, manage organizations and IP groups, configure identity providers, and generate access reports.
Credential access permission alone is not sufficient for API proxy access. For the settings in the credential and access permission to be valid, one of the authentication policies must be added on the API Proxy and the Security Manager option must be selected as the authentication method in this policy.
Module Core Components
The Identity Management module provides centralized management of credentials and access control lists of clients that will access API Proxies. With this module:
- Client credentials and access permissions are managed
- Contract and protocol management is performed
- Organizations and IP groups are created
- Identity providers are configured
- Access reports are generated
Module Components
The Identity Management module is managed through the following pages:
Creating, managing credentials of clients that will access API Proxies and access control settings.
Contract/protocol management with clients, API Proxy and credential association.
Managing access permissions of credentials of clients that will access API Proxies and API Proxy-based access control.
Managing access permissions of credentials of clients that will access API Proxy Groups and details of these permissions.
Keeping organization information that credentials are linked to, searching and grouping credentials.
Defining IP groups to manage a group of IP addresses together. Used in Allowed IP List and Blocked IP List policies.
Authorization and role definition after identity verification in API Proxies.
Creating and querying access control list reports based on API Proxy or organization/credential.
Configuring rate limit control for APIs and endpoints, defining identity-based limits, and overuse protection.
Identity Providers
Identity providers specify the user pool to be given to clients. These predefined identity providers are used when creating authentication policies.