Authorized Entities Directory

Admin UI (web2ldap) // Password self-service // OATH enrollment

The agile IAM for DevOps

Authorized Entities Directory (Æ-DIR) is a Privileged Identity and Access Management (IAM/PIM/PAM) based on OpenLDAP

News

• 2020-09-20: ansible-ae-dir-server 0.22.0 -- Web applications are now started with gunicorn as WSGI app server
• 2020-09-18: ansible-ae-dir-server 0.21.0 -- Added sortvals config option to slapd.conf, needs reloading main database
• 2020-08-14: ansible-ae-dir-server 0.20.0 -- Updated OATH-LDAP services
• 2020-07-21: ansible-ae-dir-server 0.19.0 -- Added support for Ubuntu 20.04 LTS, fixed loading initial data

Main Objectives

• Strictly follow need to know and least privilege principles
• Agile data maintenance by consequent delegation of manageable small areas
• Provide meaningful audit trails for compliance checks
• Secure defaults

Key Features

• Fine-grained authorization
• Fine-grained delegation, ready-to-use role-model
• Role separation, multiple accounts per person
• Secure password handling, SSH key distribution
• Password self-service web application
• Compatible to all LDAP enabled applications without complicated client-side schema mapping
• Two-factor authentication integrated with LDAP, usable by any LDAP enabled application
• High availability out-of-the-box with LDAP server replicas
• Automated installation of turnkey solution with ansible
• TLS everywhere
• Service hardening out-of-the-box (e.g. with AppArmor)

Find longer introductions: Æ-DIR conference presentations.