简体繁体 English

Microsoft Identity Manager是否支持Oauth2

[英]Is Oauth2 supported by Microsoft Identity Manager

原文 2017-03-24 05:28:35 9 2 oauth-2.0/ identity/ claims-based-identity/ identity-management

We have a bunch of websites under re-built and few mobile apps under development. 我们有许多网站正在重建中，少数移动应用正在开发中。 We are looking for a Identity Manager / Server that can be used for authentication and authorisation of the users logging into those portals and apps. 我们正在寻找一个Identity Manager /服务器，该服务器可用于对登录到这些门户网站和应用程序的用户进行身份验证和授权。 I did some a brief research but could't find the answer to my questions below: 我做了一些简短的研究，但是在下面找不到我的问题的答案：

Does't MIM support OAuth2 / OpenId Connect based authentication protocol? MIM不支持基于OAuth2 / OpenId Connect的身份验证协议吗？
Can we create user profile and add users claims in it? 我们可以创建用户个人资料并在其中添加用户声明吗？
Does it have APIs that portals can call to add users into the user storage? 门户是否可以调用将用户添加到用户存储中的API？
Does it provide API endpoints for change password and forgot password to add self serve password recovery feature on the portals? 它是否提供用于更改密码和忘记密码的API端点，以在门户网站上添加自助密码恢复功能？

I am a developer and have little knowledge about active directory and identity management area. 我是一名开发人员，对活动目录和身份管理区域不了解。

2 个解决方案

I was in the same boat you are in, and was trying to decide between MIM and Red Hat Keycloak. 我和您在同一条船上，并试图在MIM和Red Hat Keycloak之间做出选择。 I ended up going with Keycloak, it is powerful yet easy to setup, configure, and manage, whereas MIM is a pain in the neck to setup. 我最终选择了Keycloak，它功能强大，但易于设置，配置和管理，而MIM设置起来很麻烦。

It sounds like you are looking for a single signon or federation solution, if that's the case MIM won't be able to help you. 听起来好像您正在寻找单一登录或联盟解决方案，如果那样的话MIM将无法为您提供帮助。 MIM is designed to synchronise user accounts from an authoritative source and maintain them in other connected systems (typically HR to AD). MIM旨在同步来自权威来源的用户帐户，并将其维护在其他连接的系统（通常是HR到AD）中。

The equivalent product to Keycloak in the Microsoft space would be ADFS (Active Directory Federation Services) or Azure AD. Microsoft空间中与Keycloak等效的产品将是ADFS（Active Directory联合身份验证服务）或Azure AD。