White Papers
Zero Trust and XACML
Government, enterprise, and military decision-makers face a pressing challenge: how to implement fine-grained Zero Trust Architecture (ZTA) without introducing brittle, complex policy environments. Attribute-Based Access Control (ABAC), powered by XACML, has become a foundational element of ZTA by enabling dynamic, context-aware access decisions. Yet, the inherent complexity of authoring policies in XACML has traditionally hindered widespread adoption.
This white paper explores the use of XACML-driven ABAC and demonstrates how GUI-based policy authoring overcomes the complexity barrier. By simplifying policy creation and administration, it empowers security architects, administrators, and auditors to manage ABAC policies more effectively and confidently.
The XACML Policy Enforcement System explained and how ViewDS product solutions can help reduce administrative overhead, provide comprehensive access logging for auditing and compliance reporting, to offer a robust and efficient XACML Policy Server by leveraging the underlying Directory and XML capabilities.
Learn the difference between role-based versus attribute-based access control, the attribute-based nature of XACML, its policies and processing, and solutions to resolving its dirty little secret.
The XACML Policy Enforcement System explained and how ViewDS product solutions can help reduce administrative overhead, provide comprehensive access logging for auditing and compliance reporting, to offer a robust and efficient XACML Policy Server by leveraging the underlying Directory and XML capabilities.
Learn the difference between role-based versus attribute-based access control, the attribute-based nature of XACML, its policies and processing, and solutions to resolving its dirty little secret.
ViewDS Directory
Complex organizations such as governments continually make changes to the details of their hierarchy. Access to updated information is often critical to operations and public access, but reflecting such changes in repositories like databases and directories can be time-consuming and onerous. Even an apparently minor change, such as updating a department name or an email domain, can be an absolute nightmare. This paper describes how such changes can be made in minutes rather than weeks.
There are many directory servers available on the market. Most are LDAP directories with varying degrees of capability and performance, while many are simply directories by second nature after being built on another technology, such as a relational database. ViewDS Directory Server is a powerful LDAP server but also offers several significant additional capabilities to meet specific requirements.
Humans searching for information online are just that. Human. We make errors, misspell, or use abbreviations in searches: These sorts of mistakes wehn accessing databases or address books can lead to frustration, wasted time, and generally a poor user experience. This paper explains the benefits of using approximate-matching functionality to overcome these shortcomings.
ViewDS directory-based products have some unique features that deliver superior performance, reliability and operability in large distributed environments. This document discusses ViewDS Directory Server’s capabilities for operating in a distributed and replicated environment.
Many LDAP directories need to have flat structures for performance reasons. This limits their ability to reflect real-world structures. ViewDS Directory Server not only has a directory tree that maps real hierarchies but can also map alternative groups in the same directory. This paper illustrates the possible uses of such a capability.
Complex organizations such as governments continually make changes to the details of their hierarchy. Access to updated information is often critical to operations and public access, but reflecting such changes in repositories like databases and directories can be time-consuming and onerous. Even an apparently minor change, such as updating a department name or an email domain, can be an absolute nightmare. This paper describes how such changes can be made in minutes rather than weeks.
There are many directory servers available on the market. Most are LDAP directories with varying degrees of capability and performance, while many are simply directories by second nature after being built on another technology, such as a relational database. ViewDS Directory Server is a powerful LDAP server but also offers several significant additional capabilities to meet specific requirements.
Humans searching for information online are just that. Human. We make errors, misspell, or use abbreviations in searches: These sorts of mistakes wehn accessing databases or address books can lead to frustration, wasted time, and generally a poor user experience. This paper explains the benefits of using approximate-matching functionality to overcome these shortcomings.
ViewDS directory-based products have some unique features that deliver superior performance, reliability and operability in large distributed environments. This document discusses ViewDS Directory Server’s capabilities for operating in a distributed and replicated environment.
Many LDAP directories need to have flat structures for performance reasons. This limits their ability to reflect real-world structures. ViewDS Directory Server not only has a directory tree that maps real hierarchies but can also map alternative groups in the same directory. This paper illustrates the possible uses of such a capability.
Cobalt IAM
While developing a cloud application is not very different from developing an on-premises application, cloud application architecture does differ in several important ways. We outline these differences and discuss three approaches to dealing with identity in cloud-based applications.
While developing a cloud application is not very different from developing an on-premises application, cloud application architecture does differ in several important ways. We outline these differences and discuss three approaches to dealing with identity in cloud-based applications.
General Information
Integrating Cobalt Identity Server with Office 365 using SAML 2.0 for web SSO? This post is a straightforward, step-by-step guide to configuring Office 365 to use SAML SSO, while also helping those attempting to integrate 365 with an external SAML IdP.
Description and comparison of the three main ways in which Public Key Infrastructure (PKI) applications might use an LDAP or X.500 directory as a repository for application data, and points out the advantages of using ViewDS in such deployments.
Integrating Cobalt Identity Server with Office 365 using SAML 2.0 for web SSO? This post is a straightforward, step-by-step guide to configuring Office 365 to use SAML SSO, while also helping those attempting to integrate 365 with an external SAML IdP.
Description and comparison of the three main ways in which Public Key Infrastructure (PKI) applications might use an LDAP or X.500 directory as a repository for application data, and points out the advantages of using ViewDS in such deployments.