The basic idea of Entitlements is to use a dedicated Git repository as a way to provide a centralized clearinghouse for identity management data and using pull requests to make any changes-new approvals, reverifications and any other changes can be made to a given repository for a given system. The use of metadata tags also allows administrators to be granular in how they manage access to their systems-approvals dating back long enough can be subjected to mandatory reverification, differently tagged users can be granted different rights and privileges, and so on. Moreover, the use of Git provides a detailed audit log for the whole process, letting administrators track who requested what access and when, when it was granted, and by whom, for example. Detailed lists of groups, organized by manager, region, access level and more are also available for better auditing. Gitify is a set of command-line commands that can be used for versioning and dev-stage-production workflows with a MODX site. Git has been using the Entitlements system internally for "years," according to the company's official blog post announcing that Entitlements has gone open source. Its primary purpose is to create file representations of objects in the MODX database (such as resources and elements, but any object can be included), so they can be committed to a version control system such as git. The system can be used on any Git repository, but using it with directly allows for more functionality, like the use of cron jobs to automate review and auditing tasks, or use a business data "source-of-truth" to push updates from an org chart to the Entitlements framework. Moreover, GitHub said, like any good open source project, Entitlements is constantly being improved and iterated upon. "GitHub uses Entitlements every day, averaging around 2,000 commits per month," the company said in the blog post. We want to enable others to use what we've built for their own IAM needs." "We're constantly shipping improvements to the app and exploring ways to make it even easier to use. ![]() ![]() More information about the Entitlements system is available at the app's repo, and example configurations and workflows are available at the config repo here.
0 Comments
Leave a Reply. |