7. Connect external IAM

This section covers different methods to uni-directionally import user accounts and user groups from external IAM systems to Nubus for Kubernetes.

To add user accounts to Nubus only when users sign in the first time you can use Federation with external IAM systems. This setup is easier to configure, has a low overhead and is good for evaluation purposes. Nubus uses the external IAM system for user authentication.

To proactively import the entirety of user accounts to Nubus from an external IAM system, you can Import from external IAM. Nubus uses the external IAM system for user authentication, as well. This setup allows to search for user accounts even before they sign-in for the first time. Components and Nubus and applications connected to Nubus can refer to the imported user accounts, for example inviting users to meetings, or use their email address from the integrated address book.

Contents

• 7.1. Federation with external IAM systems
• 7.2. Import from external IAM
  • 7.2.1. Prerequisites
  • 7.2.2. Connection setup for UDM HTTP REST API
  • 7.2.3. Nubus Directory Importer installation
  • 7.2.4. Configuration of Nubus Directory Importer
  • 7.2.5. Performance optimizations
  • 7.2.6. Setup single sign-on
  • 7.2.7. Verify the sign-in