2. Overviews

This section contains several overviews about the architecture of Univention Nubus. It’s for readers who want to get a general understanding of what belongs to Nubus. The section covers the following topics:

1. Capabilities

2. Functional components

3. Capability mapping

4. Interfaces and protocols

5. Deployment view

6. Transport security with TLS

Content

• 2.1. Capabilities
  • 2.1.1. End user perspective
    • 2.1.1.1. User account self service
    • 2.1.1.2. Uniform integrated user interface
    • 2.1.1.3. Single Sign-On / Single Sign-Out
  • 2.1.2. Provider and operation perspective
    • 2.1.2.1. Operation in Kubernetes cluster
    • 2.1.2.2. Management of user accounts
    • 2.1.2.3. Integration with external IAM systems
    • 2.1.2.4. DVS compatible
  • 2.1.3. Development and governance perspective
    • 2.1.3.1. Integration of components and applications
    • 2.1.3.2. Support and Maintenance
    • 2.1.3.3. Available as Open Source Software
• 2.2. Functional components
  • 2.2.1. End user facing
    • 2.2.1.1. Portal Service
    • 2.2.1.2. Management UI
    • 2.2.1.3. End User Self Service
  • 2.2.2. Authentication and Authorization
    • 2.2.2.1. Identity Provider
    • 2.2.2.2. Authorization Service
    • 2.2.2.3. Directory Manager
    • 2.2.2.4. Identity Store and Directory Service
  • 2.2.3. Integration
    • 2.2.3.1. Provisioning Service
    • 2.2.3.2. Intercom Service
  • 2.2.4. Connectors
    • 2.2.4.1. IAM Connector
    • 2.2.4.2. Nubus Directory Importer
• 2.3. Capability mapping
  • 2.3.1. End user perspective
  • 2.3.2. Provider and operation perspective
  • 2.3.3. Development and governance perspective
• 2.4. Interfaces and protocols
  • 2.4.1. External perspective
  • 2.4.2. Authorization Service
    • 2.4.2.1. Guardian Authorization HTTP REST API
    • 2.4.2.2. Open Policy Agent
    • 2.4.2.3. Guardian Management HTTP REST API
    • 2.4.2.4. Guardian Management UI
  • 2.4.3. Directory Manager
  • 2.4.4. End User Self Service
  • 2.4.5. Identity Provider
  • 2.4.6. Identity Store and Directory Service
  • 2.4.7. Intercom Service
  • 2.4.8. Management UI
  • 2.4.9. Portal Service
  • 2.4.10. Provisioning Service
• 2.5. Deployment view
  • 2.5.1. Registries for Helm Charts and images
  • 2.5.2. Authorization Service
  • 2.5.3. Directory Manager
  • 2.5.4. End User Self Service
  • 2.5.5. Identity Provider
  • 2.5.6. Identity Store and Directory Service
  • 2.5.7. Management UI
  • 2.5.8. Portal Service
  • 2.5.9. Provisioning Service
  • 2.5.10. Ingress configuration
  • 2.5.11. SQL database: PostgreSQL
• 2.6. Transport security with TLS