170 likes | 188 Views
What is ADAM?. Authority Delegation and Management (ADAM) MoFR web-based application Enables granting & managing of application access Delegation of user access administration to select individuals Efficient authorization of End Users for any MoFR web-based (Web-ADE) application.
E N D
What is ADAM? • Authority Delegation and Management (ADAM) • MoFR web-based application • Enables granting & managing of application access • Delegation of user access administration to select individuals • Efficient authorization of End Users for any MoFR web-based (Web-ADE) application
Authorization vs. Authentication • Adam does NOT manage authentication • Authentication is the process of determining you are who you say you are • Performed by authenticating source (IDIR or BCeID) • ADAM does manage authorizations • Authorizations are the functions a user can perform in an application • For example run reports, enter data, etc.
Linking WebADE & ADAM • WebADE is a framework • Allows the implementation of authorizations for enterprise level applications • ADAM is the interface • User friendly interface to grant & manage application authorization • Distribution of authorization management to appropriate representatives
Who Uses ADAM? • ADAM is role specific • You must have one of five “roles” to use ADAM: • ADAM Administrator • Application Administrator • Authorization Grantor • End User • Help Desk
Terminology • Delegation • The act of giving an appropriate representative the ability to manage user access to applications • Authorization • The ability to perform specific actions within an application • Organization • An organizational unit/company/community group/public institution/discrete entity/etc.
Terminology (cont.) • Profile: • Refers to one or more “Application Roles” • Typically reflects a business function, rather than a specific application function • Profiles can be associated with an organization • Profiles can span applications • Note: This capability is available but implementation is still under consideration
Understanding the Profile/Org Link • If a profile is not secured by organization then: • Application Administrators & Authorization Grantors can NOT select an organization during delegations/authorizations • End Users have access to the application based on the profile
Understanding the Profile/Org Link (cont.) • If a profile is secured by organization then: • Application Administrators may: • Select a specific organization for a delegation • Auth Grantor can then authorize the profile for the specified organization • End Users have access to the application based on the profile and on behalf of the organization
Demo • Demonstration of: • ADAM Home Page • Online Help Guide Next Presentation: Working with Delegations