{"id":31656,"date":"2019-10-31T21:42:23","date_gmt":"2019-10-31T18:42:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika\/"},"modified":"2019-10-31T21:42:23","modified_gmt":"2019-10-31T18:42:23","slug":"vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","title":{"rendered":"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V p\u0159edchoz\u00edch \u010dl\u00e1nc\u00edch jsme ji\u017e zkoumali, co je IdM, jak pochopit, zda va\u0161e organizaci takov\u00fd syst\u00e9m pot\u0159ebuje, jak\u00e9 \u00fakoly \u0159e\u0161\u00ed a jak obh\u00e1jit rozpo\u010det na implementaci p\u0159ed veden\u00edm. Dnes se budeme bavit o d\u016fle\u017eit\u00fdch kroc\u00edch, kter\u00fdmi mus\u00ed organizace proj\u00edt, aby dos\u00e1hla po\u017eadovan\u00e9 \u00farovn\u011b zralosti p\u0159ed zaveden\u00edm syst\u00e9mu IdM. IdM je ur\u010den k automatizaci proces\u016f, a automatizovat chaos nen\u00ed mo\u017en\u00e9.<\/p>\n<p><img decoding=\"async\" alt=\"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka\" src=\"\/wp-content\/uploads\/2019\/04\/7afbc5d602a3a4ac7d254438769f7cf1.png\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Do doby, ne\u017e spole\u010dnost vyroste do velikosti velk\u00e9ho podniku a nahromad\u00ed \u0159adu r\u016fzn\u00fdch business syst\u00e9m\u016f, obvykle se nezab\u00fdv\u00e1 spr\u00e1vou p\u0159\u00edstupu. Procesy \u017e\u00e1d\u00e1n\u00ed o pr\u00e1va a kontrola opr\u00e1vn\u011bn\u00ed tedy nejsou strukturovan\u00e9 a \u0161patn\u011b se analyzuj\u00ed. Zam\u011bstnanci si \u017e\u00e1daj\u00ed o p\u0159\u00edstup, jak cht\u011bj\u00ed, proces schvalov\u00e1n\u00ed tak\u00e9 nen\u00ed formalizov\u00e1n, nebo n\u011bkdy ani neexistuje. Je nemo\u017en\u00e9 rychle zjistit, jak\u00e1 pr\u00e1va m\u00e1 zam\u011bstnanec, kdo je schv\u00e1lil a na jak\u00e9m z\u00e1klad\u011b.<\/p>\n<p><img decoding=\"async\" alt=\"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka\" src=\"\/wp-content\/uploads\/2019\/04\/1c0a8c343cc577d6f8ad11d0b862a734.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nVzhledem k tomu, \u017ee proces automatizace p\u0159\u00edstupu se dot\u00fdk\u00e1 dvou hlavn\u00edch oblast\u00ed \u2013 person\u00e1ln\u00edch \u00fadaj\u016f a \u00fadaj\u016f informa\u010dn\u00edch syst\u00e9m\u016f, s nimi\u017e se m\u00e1 prov\u00e9st integrace, zva\u017eme kroky pot\u0159ebn\u00e9 k tomu, aby implementace IdM prob\u011bhla hladce a nezp\u016fsobila odpor:<\/p>\n<ol>\n<li>Anal\u00fdza person\u00e1ln\u00edch proces\u016f a optimalizace spr\u00e1vy datab\u00e1ze zam\u011bstnanc\u016f v person\u00e1ln\u00edch syst\u00e9mech.<\/li>\n<li>Anal\u00fdza \u00fadaj\u016f o u\u017eivatel\u00edch a pr\u00e1vech, stejn\u011b jako aktualizace zp\u016fsob\u016f spr\u00e1vy p\u0159\u00edstupu v c\u00edlov\u00fdch syst\u00e9mech, kter\u00e9 se pl\u00e1nuj\u00ed p\u0159ipojit k IdM.<\/li>\n<li>Organiza\u010dn\u00ed opat\u0159en\u00ed a zapojen\u00ed zam\u011bstnanc\u016f do procesu p\u0159\u00edpravy na zaveden\u00ed IdM.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Person\u00e1ln\u00ed \u00fadaje<\/h3>\n<p>\nZdroj person\u00e1ln\u00edch \u00fadaj\u016f v organizaci m\u016f\u017ee b\u00fdt jeden, nebo jich m\u016f\u017ee b\u00fdt v\u00edce. Nap\u0159\u00edklad organizace m\u016f\u017ee m\u00edt dostate\u010dn\u011b \u0161irokou pobo\u010dkovou s\u00ed\u0165 a v ka\u017ed\u00e9 pobo\u010dce m\u016f\u017ee b\u00fdt pou\u017e\u00edv\u00e1na vlastn\u00ed datab\u00e1ze zam\u011bstnanc\u016f.<\/p>\n<p>P\u0159edev\u0161\u00edm je nutn\u00e9 pochopit, jak\u00e9 z\u00e1kladn\u00ed \u00fadaje o zam\u011bstnanc\u00edch jsou uchov\u00e1v\u00e1ny v syst\u00e9mu person\u00e1ln\u00ed evidence, jak\u00e9 ud\u00e1losti jsou zaznamen\u00e1v\u00e1ny, a posoudit jejich \u00faplnost a strukturu.<\/p>\n<p>\u010casto se st\u00e1v\u00e1, \u017ee ne v\u0161echny person\u00e1ln\u00ed ud\u00e1losti jsou zaznamen\u00e1ny v person\u00e1ln\u00edm zdroji (a je\u0161t\u011b \u010dast\u011bji jsou zaznamen\u00e1v\u00e1ny opo\u017ed\u011bn\u011b a nespr\u00e1vn\u011b). Zde jsou n\u011bkter\u00e9 typick\u00e9 p\u0159\u00edklady:<\/p>\n<ul>\n<li>nejsou zaznamen\u00e1ny dovolen\u00e9, jejich kategorie a trv\u00e1n\u00ed (b\u011b\u017en\u00e9 nebo dlouh\u00e9);<\/li>\n<li>\u010c\u00e1ste\u010dn\u00e1 pracovn\u00ed doba nen\u00ed zaznamen\u00e1v\u00e1na: nap\u0159\u00edklad b\u011bhem dlouh\u00e9 mate\u0159sk\u00e9 dovolen\u00e9 m\u016f\u017ee zam\u011bstnanec z\u00e1rove\u0148 pracovat na \u010d\u00e1ste\u010dn\u00fd \u00favazek;<\/li>\n<li>Skute\u010dn\u00fd status kandid\u00e1ta nebo zam\u011bstnance se ji\u017e zm\u011bnil (p\u0159ijet\u00ed\/p\u0159evod\/ukon\u010den\u00ed), ale p\u0159\u00edkaz k t\u00e9to ud\u00e1losti je vyd\u00e1v\u00e1n se zpo\u017ed\u011bn\u00edm;<\/li>\n<li>Zam\u011bstnanec je p\u0159eveden na novou pozici prost\u0159ednictv\u00edm ukon\u010den\u00ed, p\u0159i\u010dem\u017e v person\u00e1ln\u00edm syst\u00e9mu nen\u00ed zaznamen\u00e1na informace, \u017ee se jedn\u00e1 o technick\u00e9 ukon\u010den\u00ed.<\/li>\n<\/ul>\n<p>\nJe tak\u00e9 d\u016fle\u017eit\u00e9 v\u011bnovat pozornost hodnocen\u00ed kvality dat, proto\u017ee jak\u00e9koli chyby a nep\u0159esnosti z\u00edskan\u00e9 z d\u016fv\u011bryhodn\u00e9ho zdroje, kter\u00fdm jsou syst\u00e9my person\u00e1ln\u00ed evidence, mohou n\u00e1sledn\u011b b\u00fdt n\u00e1kladn\u00e9 a vyvolat \u0159adu probl\u00e9m\u016f p\u0159i implementaci IdM. Nap\u0159\u00edklad zam\u011bstnanci person\u00e1ln\u00edch slu\u017eeb \u010dasto zad\u00e1vaj\u00ed pozice pracovn\u00edk\u016f do person\u00e1ln\u00edho syst\u00e9mu v r\u016fzn\u00e9m form\u00e1tu: velk\u00e1 a mal\u00e1 p\u00edsmena, zkratky, r\u016fzn\u00e9 mno\u017estv\u00ed mezer a podobn\u011b. V d\u016fsledku toho m\u016f\u017ee b\u00fdt jedna a tat\u00e1\u017e pozice zaznamen\u00e1na v person\u00e1ln\u00edm syst\u00e9mu v n\u00e1sleduj\u00edc\u00edch variant\u00e1ch:<\/p>\n<ul>\n<li>Vedouc\u00ed mana\u017eer<\/li>\n<li>vedouc\u00ed mana\u017eer<\/li>\n<li>v. mana\u017eer<\/li>\n<li>v. mana\u017eer\u2026<\/li>\n<\/ul>\n<p>\n\u010casto se tak\u00e9 setk\u00e1v\u00e1me s rozd\u00edly ve psan\u00ed jmen a p\u0159\u00edjmen\u00ed:<\/p>\n<ul>\n<li>\u0160meljova Nat\u00e1lie Genadijovna,<\/li>\n<li>\u0160meljova Natalia Genadijevna\u2026<\/li>\n<\/ul>\n<p>\nPro dal\u0161\u00ed automatizaci je takov\u00fd nepo\u0159\u00e1dek nep\u0159ijateln\u00fd, zejm\u00e9na pokud jsou tyto atributy kl\u00ed\u010dov\u00fdm pozn\u00e1vac\u00edm znakem, tedy \u00fadaje o zam\u011bstnanci a jeho pravomoc\u00edch v syst\u00e9mech se porovn\u00e1vaj\u00ed pr\u00e1v\u011b podle jm\u00e9na a p\u0159\u00edjmen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka\" src=\"\/wp-content\/uploads\/2019\/04\/02a88e4af7d06b3eb0268b5a9f38e8a6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nKrom\u011b toho by se nem\u011blo zapom\u00ednat na mo\u017en\u00e9 existenci jmenovc\u016f a \u00fapln\u00fdch dvojn\u00edk\u016f ve spole\u010dnosti. Pokud m\u00e1 organizace tis\u00edc zam\u011bstnanc\u016f, takov\u00fdch shod m\u016f\u017ee b\u00fdt m\u00e1lo, ale pokud je jich 50 tis\u00edc, m\u016f\u017ee to p\u0159edstavovat kritickou p\u0159ek\u00e1\u017eku pro spr\u00e1vnou funkci syst\u00e9mu IdM.<\/p>\n<p><b>Shrnuj\u00edc\u00ed v\u0161e v\u00fd\u0161e uveden\u00e9, doch\u00e1z\u00edme k z\u00e1v\u011bru: form\u00e1t zad\u00e1v\u00e1n\u00ed \u00fadaj\u016f do person\u00e1ln\u00ed datab\u00e1ze organizace by m\u011bl b\u00fdt standardizov\u00e1n.<\/b> Parametry zad\u00e1v\u00e1n\u00ed jmen a p\u0159\u00edjmen\u00ed, pozic a odd\u011blen\u00ed by m\u011bly b\u00fdt jasn\u011b definov\u00e1ny. Optim\u00e1ln\u00edm \u0159e\u0161en\u00edm je, kdy\u017e person\u00e1ln\u00ed pracovn\u00edk nezad\u00e1v\u00e1 \u00fadaje ru\u010dn\u011b, ale vyb\u00edr\u00e1 je z p\u0159edem vytvo\u0159en\u00e9ho seznamu struktury odd\u011blen\u00ed a pozic pomoc\u00ed funkce \u201eselect\u201c, kter\u00e1 je k dispozici v person\u00e1ln\u00ed datab\u00e1zi.<\/p>\n<p>Aby se p\u0159ede\u0161lo dal\u0161\u00edm chyb\u00e1m v synchronizaci a ru\u010dn\u00edmu opravov\u00e1n\u00ed nesrovnalost\u00ed v reportech, <b>nejpreferovan\u011bj\u0161\u00edm zp\u016fsobem identifikace zam\u011bstnanc\u016f je zaveden\u00ed ID <\/b>pro ka\u017ed\u00e9ho pracovn\u00edka organizace. Tento identifik\u00e1tor bude p\u0159id\u011blov\u00e1n ka\u017ed\u00e9mu nov\u00e9mu pracovn\u00edkovi a bude figurovat jak v mzdov\u00e9m syst\u00e9mu, tak v informa\u010dn\u00edch syst\u00e9mech organizace jako povinn\u00fd atribut \u00fa\u010dtu. Nez\u00e1le\u017e\u00ed na tom, zda se skl\u00e1d\u00e1 z \u010d\u00edslic nebo p\u00edsmen \u2014 hlavn\u00ed je, aby byl pro ka\u017ed\u00e9ho pracovn\u00edka unik\u00e1tn\u00ed (nap\u0159\u00edklad mnoz\u00ed pou\u017e\u00edvaj\u00ed eviden\u010dn\u00ed \u010d\u00edslo zam\u011bstnance). Zaveden\u00ed tohoto atributu v\u00fdrazn\u011b usnadn\u00ed spojen\u00ed \u00fadaj\u016f o zam\u011bstnanci v mzdov\u00e9m zdroji s jeho \u00fa\u010dty a opr\u00e1vn\u011bn\u00edmi v informa\u010dn\u00edch syst\u00e9mech.<\/p>\n<p>V\u0161echny kroky a mechanismy mzdov\u00e9ho \u00fa\u010detnictv\u00ed bude t\u0159eba analyzovat a uspo\u0159\u00e1dat. Je mo\u017en\u00e9, \u017ee n\u011bkter\u00e9 procesy bude t\u0159eba zm\u011bnit nebo upravit. Je to \u00fanavn\u00e1 a pe\u010dliv\u00e1 pr\u00e1ce, ale je nezbytn\u00e1, jinak absence jasn\u00fdch a strukturovan\u00fdch dat o mzdov\u00fdch ud\u00e1lostech povede k chyb\u00e1m p\u0159i jejich automatizovan\u00e9m zpracov\u00e1n\u00ed. V nejhor\u0161\u00edm p\u0159\u00edpad\u011b nebudou neorganizovan\u00e9 procesy v\u016fbec automatizovateln\u00e9.<\/p>\n<h3>C\u00edlov\u00e9 syst\u00e9my<\/h3>\n<p>\nV dal\u0161\u00edm kroku je t\u0159eba vyjasnit, kolik informa\u010dn\u00edch syst\u00e9m\u016f chceme integrovat do struktury IdM, jak\u00e9 \u00fadaje o u\u017eivatel\u00edch a jejich pr\u00e1vech jsou v t\u011bchto syst\u00e9mech uchov\u00e1v\u00e1ny a jak je spravovat.<\/p>\n<p>V mnoha organizac\u00edch panuje n\u00e1zor, \u017ee nainstalujeme IdM, nastav\u00edme konektory k c\u00edlov\u00fdm syst\u00e9m\u016fm a m\u00e1vnut\u00edm kouzeln\u00e9ho proutku v\u0161e za\u010dne fungovat, bez dal\u0161\u00edho \u00fasil\u00ed z na\u0161\u00ed strany. Tak tomu, bohu\u017eel, nen\u00ed. V spole\u010dnostech se krajina informa\u010dn\u00edch syst\u00e9m\u016f vyv\u00edj\u00ed a postupn\u011b roste. V ka\u017ed\u00e9m z t\u011bchto syst\u00e9m\u016f m\u016f\u017ee b\u00fdt zorganizov\u00e1n r\u016fzn\u00fd p\u0159\u00edstup k poskytov\u00e1n\u00ed pr\u00e1v p\u0159\u00edstupu, co\u017e znamen\u00e1, \u017ee jsou nastaveny r\u016fzn\u00e9 rozhran\u00ed pro spr\u00e1vu p\u0159\u00edstupu. N\u011bkde se spr\u00e1va uskute\u010d\u0148uje p\u0159es API (aplika\u010dn\u00ed programovac\u00ed rozhran\u00ed), jinde pomoc\u00ed datab\u00e1ze a ulo\u017een\u00fdch procedur, jinde mohou rozhran\u00ed pro interakci zcela chyb\u011bt. Je dobr\u00e9 b\u00fdt p\u0159ipraven na to, \u017ee bude t\u0159eba p\u0159ezkoumat mnoh\u00e9 st\u00e1vaj\u00edc\u00ed procesy spr\u00e1vy \u00fa\u010dt\u016f a pr\u00e1v v syst\u00e9mech organizace: zm\u011bnit form\u00e1t dat, p\u0159edem doladit rozhran\u00ed pro interakci a vy\u010dlenit prost\u0159edky na tyto pr\u00e1ce.<\/p>\n<h3>Role model<\/h3>\n<p>\nS pojmem role model se pravd\u011bpodobn\u011b setk\u00e1te u\u017e v etap\u011b v\u00fdb\u011bru dodavatele \u0159e\u0161en\u00ed IdM, proto\u017ee to je jedno z kl\u00ed\u010dov\u00fdch pojm\u016f v oblasti spr\u00e1vy pr\u00e1v p\u0159\u00edstupu. V tomto modelu je poskytov\u00e1n\u00ed p\u0159\u00edstupu k dat\u016fm realizov\u00e1no prost\u0159ednictv\u00edm role. Role je souhrn p\u0159\u00edstup\u016f, kter\u00e9 jsou minim\u00e1ln\u011b pot\u0159ebn\u00e9 k tomu, aby zam\u011bstnanec na ur\u010dit\u00e9 pozici mohl plnit sv\u00e9 funk\u010dn\u00ed povinnosti.<\/p>\n<p>Role-based access management m\u00e1 \u0159adu nesporn\u00fdch v\u00fdhod:<\/p>\n<ul>\n<li>jednoduchost a efektivita p\u0159i p\u0159i\u0159azov\u00e1n\u00ed stejn\u00fdch pr\u00e1v velk\u00e9mu po\u010dtu zam\u011bstnanc\u016f;<\/li>\n<li>rychl\u00e9 zm\u011bny p\u0159\u00edstupu zam\u011bstnanc\u016f, kte\u0159\u00ed maj\u00ed stejnou sadu pr\u00e1v; <\/li>\n<li>vylou\u010den\u00ed nadbyte\u010dnosti pr\u00e1v a odd\u011blen\u00ed neslu\u010diteln\u00fdch pravomoc\u00ed pro u\u017eivatele.<\/li>\n<\/ul>\n<p>\nRole matrix se nejprve vybuduje samostatn\u011b v ka\u017ed\u00e9m syst\u00e9mu organizace a pot\u00e9 se \u0161k\u00e1luje na celou IT krajinu, kde se z rol\u00ed ka\u017ed\u00e9ho syst\u00e9mu formuj\u00ed glob\u00e1ln\u00ed obchodn\u00ed role. Nap\u0159\u00edklad obchodn\u00ed role \"\u00da\u010detn\u00ed\" bude obsahovat n\u011bkolik samostatn\u00fdch rol\u00ed pro ka\u017ed\u00fd z informa\u010dn\u00edch syst\u00e9m\u016f pou\u017eit\u00fdch v \u00fa\u010detnictv\u00ed podniku.<\/p>\n<p>V posledn\u00ed dob\u011b se pova\u017euje za \u201ebest practice\u201c u\u017e ve f\u00e1zi v\u00fdvoje aplikac\u00ed, datab\u00e1z\u00ed a opera\u010dn\u00edch syst\u00e9m\u016f vytv\u00e1\u0159et rolovou strukturu. Sou\u010dasn\u011b se v\u0161ak \u010dasto vyskytuj\u00ed situace, kdy nejsou v syst\u00e9mu role nastaven\u00e9, nebo jednodu\u0161e v\u016fbec neexistuj\u00ed. V takov\u00e9m p\u0159\u00edpad\u011b mus\u00ed administr\u00e1tor tohoto syst\u00e9mu zadat \u00fadaje o \u00fa\u010dtu do n\u011bkolika r\u016fzn\u00fdch soubor\u016f, knihoven a adres\u00e1\u0159\u016f, kter\u00e9 poskytuj\u00ed pot\u0159ebn\u00e1 opr\u00e1vn\u011bn\u00ed. Pou\u017eit\u00ed p\u0159edem definovan\u00fdch rol\u00ed umo\u017e\u0148uje ud\u011blovat pr\u00e1va k prov\u00e1d\u011bn\u00ed cel\u00e9ho souboru operac\u00ed v syst\u00e9mu se slo\u017eit\u00fdmi kombinovan\u00fdmi daty.<\/p>\n<p>Role v informa\u010dn\u00edm syst\u00e9mu jsou obvykle rozd\u011bleny mezi pozice a odd\u011blen\u00ed podle organiza\u010dn\u00ed struktury, ale mohou b\u00fdt tak\u00e9 vytv\u00e1\u0159eny pro konkr\u00e9tn\u00ed obchodn\u00ed procesy. Nap\u0159\u00edklad ve finan\u010dn\u00ed organizaci n\u011bkolik zam\u011bstnanc\u016f odd\u011blen\u00ed vypo\u0159\u00e1d\u00e1n\u00ed zast\u00e1v\u00e1 stejnou pozici \u2013 oper\u00e1tor. Uvnit\u0159 odd\u011blen\u00ed v\u0161ak prob\u00edh\u00e1 dal\u0161\u00ed rozd\u011blen\u00ed na jednotliv\u00e9 procesy, podle r\u016fzn\u00fdch typ\u016f operac\u00ed (extern\u00ed nebo intern\u00ed, v r\u016fzn\u00fdch m\u011bn\u00e1ch, s r\u016fzn\u00fdmi segmenty organizace). Aby ka\u017ed\u00e9mu z obchodn\u00edch sm\u011br\u016f jednoho odd\u011blen\u00ed byl poskytnut p\u0159\u00edstup v informa\u010dn\u00edm syst\u00e9mu podle po\u017eadovan\u00e9 specifikace, je nutn\u00e9 zahrnout pr\u00e1va do jednotliv\u00fdch funk\u010dn\u00edch rol\u00ed. To umo\u017en\u00ed poskytnout minim\u00e1ln\u011b dostate\u010dn\u00fd soubor pravomoc\u00ed, kter\u00fd neobsahuje nadbyte\u010dn\u00e1 pr\u00e1va, pro ka\u017ed\u00fd z obor\u016f \u010dinnosti.<\/p>\n<p>D\u00e1le, pro velk\u00e9 syst\u00e9my se stovkami rol\u00ed, tis\u00edci u\u017eivateli a miliony opr\u00e1vn\u011bn\u00ed je dobr\u00fdm postupem pou\u017e\u00edv\u00e1n\u00ed hierarchie rol\u00ed a d\u011bd\u011bn\u00ed opr\u00e1vn\u011bn\u00ed. Nap\u0159\u00edklad rodi\u010dovsk\u00e1 role Administr\u00e1tor bude d\u011bdit opr\u00e1vn\u011bn\u00ed dce\u0159in\u00fdch rol\u00ed: U\u017eivatel a \u010cten\u00e1\u0159, proto\u017ee Administr\u00e1tor m\u016f\u017ee prov\u00e1d\u011bt v\u0161e, co U\u017eivatel a \u010cten\u00e1\u0159, nav\u00edc bude m\u00edt dal\u0161\u00ed administr\u00e1torsk\u00e1 pr\u00e1va. P\u0159i pou\u017eit\u00ed hierarchie nen\u00ed nutn\u00e9 znovu uv\u00e1d\u011bt stejn\u00e1 pr\u00e1va v n\u011bkolika rol\u00edch jednoho modulu nebo syst\u00e9mu.<\/p>\n<p>V prvn\u00ed f\u00e1zi lze vytv\u00e1\u0159et role v t\u011bch syst\u00e9mech, kde je mo\u017en\u00e9 mno\u017estv\u00ed kombinac\u00ed pr\u00e1v relativn\u011b mal\u00e9 a n\u00e1sledn\u011b se snadno spravuje omezen\u00fd po\u010det rol\u00ed. Mohou to b\u00fdt standardn\u00ed pr\u00e1va pot\u0159ebn\u00e1 v\u0161em zam\u011bstnanc\u016fm firmy, ve ve\u0159ejn\u00fdch syst\u00e9mech, jako je katalog Active Directory (AD), e-mailov\u00e9 syst\u00e9my, Service Manager a podobn\u011b. Pot\u00e9 je mo\u017en\u00e9 zahrnout vytvo\u0159en\u00e9 rolov\u00e9 matice pro informa\u010dn\u00ed syst\u00e9my do spole\u010dn\u00e9ho rolov\u00e9ho modelu, \u010d\u00edm\u017e se sjednot\u00ed do obchodn\u00edch rol\u00ed.<\/p>\n<p>Pou\u017eit\u00edm takov\u00e9ho p\u0159\u00edstupu bude v budoucnu p\u0159i implementaci syst\u00e9mu IdM snadn\u00e9 automatizovat cel\u00fd proces poskytov\u00e1n\u00ed p\u0159\u00edstupov\u00fdch pr\u00e1v na z\u00e1klad\u011b vytvo\u0159en\u00fdch rol\u00ed z prvn\u00ed f\u00e1ze.<\/p>\n<p><b>N.B. <\/b>Nen\u00ed t\u0159eba se pokou\u0161et okam\u017eit\u011b integrovat co nejv\u00edce syst\u00e9m\u016f. Syst\u00e9my s komplexn\u011bj\u0161\u00ed architekturou a strukturou spr\u00e1vy p\u0159\u00edstupov\u00fdch pr\u00e1v by m\u011bly b\u00fdt v prvn\u00ed f\u00e1zi l\u00e9pe p\u0159ipojeny k IdM v poloautomatick\u00e9m re\u017eimu. To znamen\u00e1 realizovat na z\u00e1klad\u011b person\u00e1ln\u00edch ud\u00e1lost\u00ed pouze automatick\u00e9 generov\u00e1n\u00ed \u017e\u00e1dosti o p\u0159\u00edstup, kter\u00e1 bude p\u0159edlo\u017eena administratorovi, a ten nastav\u00ed pr\u00e1va ru\u010dn\u011b.<\/p>\n<p>Po \u00fasp\u011b\u0161n\u00e9m dokon\u010den\u00ed prvn\u00ed f\u00e1ze lze roz\u0161\u00ed\u0159it funk\u010dnost syst\u00e9mu na nov\u00e9 roz\u0161\u00ed\u0159en\u00e9 obchodn\u00ed procesy, prov\u00e9st plnou automatizaci a \u0161k\u00e1lov\u00e1n\u00ed s p\u0159ipojen\u00edm dal\u0161\u00edch informa\u010dn\u00edch syst\u00e9m\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka\" src=\"\/wp-content\/uploads\/2019\/04\/8962ae078524c321544b00816e2d3780.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Jin\u00fdmi slovy, abychom se p\u0159ipravili na implementaci IdM, je t\u0159eba posoudit p\u0159ipravenost informa\u010dn\u00edch syst\u00e9m\u016f na nov\u00fd proces a v p\u0159edstihu upravit extern\u00ed rozhran\u00ed pro spr\u00e1vu u\u017eivatelsk\u00fdch \u00fa\u010dt\u016f a pr\u00e1v, pokud v syst\u00e9mu takov\u00e1 rozhran\u00ed chyb\u00ed. M\u011bli bychom tak\u00e9 projednat ot\u00e1zku postupn\u00e9ho vytv\u00e1\u0159en\u00ed rol\u00ed v informa\u010dn\u00edch syst\u00e9mech pro komplexn\u00ed spr\u00e1vu p\u0159\u00edstupu.<\/i><\/p>\n<h3>Organiza\u010dn\u00ed opat\u0159en\u00ed<\/h3>\n<p>\nNelze opom\u00edjet ani organiza\u010dn\u00ed aspekty. V n\u011bkter\u00fdch p\u0159\u00edpadech mohou hr\u00e1t rozhoduj\u00edc\u00ed roli, proto\u017ee efektivn\u00ed spolupr\u00e1ce mezi odd\u011blen\u00edmi \u010dasto z\u00e1vis\u00ed na v\u00fdsledku cel\u00e9ho projektu. V tomto ohledu obvykle doporu\u010dujeme vytvo\u0159it v organizaci t\u00fdm \u00fa\u010dastn\u00edk\u016f procesu, do n\u011bho\u017e vstoup\u00ed v\u0161echna zapojen\u00e1 odd\u011blen\u00ed. Proto\u017ee to pro lidi p\u0159edstavuje dodate\u010dnou z\u00e1t\u011b\u017e, sna\u017ete se p\u0159edem objasnit v\u0161em \u00fa\u010dastn\u00edk\u016fm nadch\u00e1zej\u00edc\u00edho procesu jejich roli a v\u00fdznam ve struktu\u0159e spolupr\u00e1ce. Pokud se na t\u00e9to etap\u011b poda\u0159\u00ed \u201eprodat\u201c koleg\u016fm my\u0161lenku IdM, lze se vyhnout mnoha komplikac\u00edm v budoucnu.<\/p>\n<p><img decoding=\"async\" alt=\"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka\" src=\"\/wp-content\/uploads\/2019\/04\/b230e2a7bba590300dd11a4e7eefdf60.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u010casto jsou \u201emajiteli\u201c projektu zav\u00e1d\u011bn\u00ed IdM ve spole\u010dnosti odd\u011blen\u00ed informa\u010dn\u00ed bezpe\u010dnosti nebo IT, a n\u00e1zor obchodn\u00edch odd\u011blen\u00ed nen\u00ed br\u00e1n v \u00favahu. To je velk\u00e1 chyba, nebo\u0165 pouze oni v\u011bd\u00ed, jak\u00fdm zp\u016fsobem a v jak\u00fdch obchodn\u00edch procesech je ka\u017ed\u00fd zdroj vyu\u017e\u00edv\u00e1n, komu je t\u0159eba ud\u011blit p\u0159\u00edstup a komu ne. Proto je v p\u0159\u00edpravn\u00e9 f\u00e1zi d\u016fle\u017eit\u00e9 vyjasnit, \u017ee obchodn\u00ed majitel odpov\u00edd\u00e1 za funk\u010dn\u00ed model, na jeho\u017e z\u00e1klad\u011b jsou vyv\u00edjeny sady pr\u00e1v (rol\u00ed) u\u017eivatel\u016f v informa\u010dn\u00edm syst\u00e9mu, a tak\u00e9 za to, aby tyto role byly udr\u017eov\u00e1ny aktu\u00e1ln\u00ed. Role model nen\u00ed statick\u00e1 matice, kterou jednou vytvo\u0159\u00edte a m\u016f\u017eete se t\u00edm uspokojit. Je to \u201e\u017eiv\u00fd organismus\u201c, kter\u00fd se mus\u00ed neust\u00e1le m\u011bnit, aktualizovat a vyv\u00edjet, aby sledoval zm\u011bny ve struktu\u0159e organizace a funkcionalit\u011b zam\u011bstnanc\u016f. Jinak se za\u010dnou objevovat probl\u00e9my spojen\u00e9 se zpo\u017ed\u011bn\u00edm v poskytov\u00e1n\u00ed p\u0159\u00edstupu, nebo vzniknou rizika informa\u010dn\u00ed bezpe\u010dnosti spojen\u00e1 s nadm\u011brn\u00fdmi p\u0159\u00edstupov\u00fdmi pr\u00e1vy, co\u017e je je\u0161t\u011b hor\u0161\u00ed.<\/p>\n<p>Jak je zn\u00e1mo, \"u sedmi ch\u016fv je d\u00edt\u011b bez oka\", proto by v ka\u017ed\u00e9 spole\u010dnosti m\u011bla b\u00fdt vyvinuta metodologie, kter\u00e1 popisuje architekturu rolov\u00e9 modelu, interakci a zodpov\u011bdnost konkr\u00e9tn\u00edch \u00fa\u010dastn\u00edk\u016f procesu za udr\u017een\u00ed jej\u00ed aktu\u00e1lnosti. Pokud m\u00e1 spole\u010dnost mnoho sm\u011br\u016f podnik\u00e1n\u00ed a s t\u00edm spojen\u00e9 mno\u017estv\u00ed odd\u011blen\u00ed a departement\u016f, je nutn\u00e9 pro ka\u017ed\u00fd sm\u011br (nap\u0159\u00edklad pro poskytov\u00e1n\u00ed \u00fav\u011br\u016f, opera\u010dn\u00ed pr\u00e1ce, vzd\u00e1len\u00e9 slu\u017eby, compliance a dal\u0161\u00ed) v r\u00e1mci procesu \u0159\u00edzen\u00ed rol\u00ed p\u0159id\u011blit jednotliv\u00e9 kur\u00e1tory. P\u0159es n\u011b bude mo\u017en\u00e9 operativn\u011b z\u00edsk\u00e1vat informace o zm\u011bn\u00e1ch ve struktu\u0159e odd\u011blen\u00ed a p\u0159\u00edstupov\u00fdch pr\u00e1vech pot\u0159ebn\u00fdch pro ka\u017edou roli.<\/p>\n<p>Je nezbytn\u00e9 z\u00edskat podporu veden\u00ed organizace pro \u0159e\u0161en\u00ed konflikt\u016f mezi odd\u011blen\u00edmi, kter\u00e9 se \u00fa\u010dastn\u00ed procesu. Konflikty p\u0159i zav\u00e1d\u011bn\u00ed jak\u00e9hokoli nov\u00e9ho procesu jsou nevyhnuteln\u00e9, v\u011b\u0159te na\u0161im zku\u0161enostem. Proto je pot\u0159eba rozhodce, kter\u00fd bude vy\u0159e\u0161it mo\u017en\u00e9 st\u0159ety z\u00e1jm\u016f, aby se neztr\u00e1celo \u010das kv\u016fli nedorozum\u011bn\u00edm a sabot\u00e1\u017e\u00edm.<\/p>\n<p><img decoding=\"async\" alt=\"Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka\" src=\"\/wp-content\/uploads\/2019\/04\/2d52e4b68be059cd908ed5c9dfc3cfb5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<b>N.B. <\/b>Dobr\u00fdm za\u010d\u00e1tkem pro zv\u00fd\u0161en\u00ed \u00farovn\u011b informovanosti bude \u0161kolen\u00ed zam\u011bstnanc\u016f. Detailn\u00ed studium fungov\u00e1n\u00ed budouc\u00edho procesu a role ka\u017ed\u00e9ho \u00fa\u010dastn\u00edka v n\u011bm umo\u017en\u00ed minimalizovat obt\u00ed\u017ee spojen\u00e9 s p\u0159echodem na nov\u00e9 \u0159e\u0161en\u00ed.<\/p>\n<h3>Kontroln\u00ed seznam<\/h3>\n<p>\nShrneme hlavn\u00ed kroky, kter\u00e9 by m\u011bla organizace prov\u00e9st p\u0159i pl\u00e1nov\u00e1n\u00ed zaveden\u00ed IdM:<\/p>\n<ul>\n<li>uspo\u0159\u00e1dat person\u00e1ln\u00ed data;<\/li>\n<li>zav\u00e9st jedine\u010dn\u00fd identifika\u010dn\u00ed parametr pro ka\u017ed\u00e9ho zam\u011bstnance;<\/li>\n<li>zhodnotit p\u0159ipravenost informa\u010dn\u00edch syst\u00e9m\u016f na zaveden\u00ed IdM;<\/li>\n<li>vytvo\u0159it rozhran\u00ed pro interakci s informa\u010dn\u00edmi syst\u00e9my pro spr\u00e1vu p\u0159\u00edstupu, pokud neexistuj\u00ed, a vy\u010dlenit prost\u0159edky na tyto pr\u00e1ce;<\/li>\n<li>vyvinout a postavit rolov\u00fd model;<\/li>\n<li>vytvo\u0159it proces \u0159\u00edzen\u00ed rolov\u00e9ho modelu a zahrnout do n\u011bj kur\u00e1tory z ka\u017ed\u00e9ho obchodn\u00edho sm\u011bru;<\/li>\n<li>vybrat n\u011bkolik syst\u00e9m\u016f pro po\u010d\u00e1te\u010dn\u00ed p\u0159ipojen\u00ed k IdM;<\/li>\n<li>vytvo\u0159it efektivn\u00ed projektov\u00fd t\u00fdm;<\/li>\n<li>z\u00edskat podporu veden\u00ed spole\u010dnosti;<\/li>\n<li>\u0161kolit zam\u011bstnance.<\/li>\n<\/ul>\n<p>\nProces p\u0159\u00edpravy m\u016f\u017ee b\u00fdt obt\u00ed\u017en\u00fd, proto pokud je to mo\u017en\u00e9, zapojte konzultanty.<\/p>\n<p>Implementace \u0159e\u0161en\u00ed IdM je slo\u017eit\u00fd a zodpov\u011bdn\u00fd krok, p\u0159i\u010dem\u017e pro \u00fasp\u011b\u0161nou realizaci jsou d\u016fle\u017eit\u00e9 jak snahy jednotliv\u00fdch stran \u2013 zam\u011bstnanc\u016f obchodn\u00edch odd\u011blen\u00ed, IT a bezpe\u010dnostn\u00edch slu\u017eeb, tak i spolupr\u00e1ce cel\u00e9ho t\u00fdmu jako celku. Ale \u00fasil\u00ed se vyplat\u00ed: po implementaci IdM ve spole\u010dnosti kles\u00e1 po\u010det incident\u016f spojen\u00fdch s nadbyte\u010dn\u00fdmi pravomocemi a neopr\u00e1vn\u011bn\u00fdmi pr\u00e1vy v informa\u010dn\u00edch syst\u00e9mech; zam\u011bstnanci se ji\u017e nemus\u00ed pot\u00fdkat s prostoji kv\u016fli nedostatku nebo dlouh\u00e9mu \u010dek\u00e1n\u00ed na pot\u0159ebn\u00e1 pr\u00e1va; automatizac\u00ed se sni\u017euj\u00ed pracovn\u00ed n\u00e1klady a zvy\u0161uje se produktivita pr\u00e1ce IT a bezpe\u010dnostn\u00edch slu\u017eeb.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/solarsecurity\/blog\/447536\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u044d\u0442\u0430\u043f\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u0430 \u043f\u0440\u043e\u0439\u0442\u0438 \u0441\u0430\u043c\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b IdM. \u0412\u0435\u0434\u044c IdM \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23566,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31656","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 IdM. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:42:23+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:42:23+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Implementace IdM. P\u0159\u00edprava na implementaci ze strany z\u00e1kazn\u00edka | ProHoster","description":"V p\u0159edchoz\u00edch \u010dl\u00e1nc\u00edch jsme ji\u017e prob\u00edrali, co je IdM, jak zjistit, zda va\u0161\u00ed organizaci takov\u00fd syst\u00e9m pot\u0159ebuje, jak\u00e9 \u00fakoly \u0159e\u0161\u00ed a jak zd\u016fvodnit rozpo\u010det implementace p\u0159ed veden\u00edm.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 IdM. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:23+00:00","article:modified_time":"2019-10-31T18:42:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31656","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:13:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:28","updated":"2026-01-21 07:13:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31656","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=31656"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31656\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/23566"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=31656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=31656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=31656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}