Open APIs

 View Only

  • 1.  Authentication factors and Users, Roles ABE

    Posted May 17, 2018 04:11
    Hi,

    Which entity/entities should keep information (attributes) about user authentication factors such as password, PIN, security token and etc.?

    Thanks.



    ------------------------------
    BR,
    Aleksandr Veremkovich
    Telekom Austria AG
    ------------------------------


  • 2.  RE: Authentication factors and Users, Roles ABE

    TM Forum Member
    Posted May 23, 2018 03:17
    ​In my opinion, no Open API entity should hold a reference to any means of authentication (be it password, PIN, smart card token, etc.). Under no circumstances would such means ever be returned as API output.
    Currently, the Open API catalog does not include API for user management (setting up users of software systems, setting or resetting authentication means). If and when such an API will be added, then would need to consider how to model that.

    ------------------------------
    Jonathan Goldberg
    Amdocs Management Limited
    ------------------------------

    Original Message


  • 3.  RE: Authentication factors and Users, Roles ABE

    TM Forum Member
    Posted May 24, 2018 02:39
    If these PIN, passwords, security token required to get access to some services. May be they a part of this Services? (or you can model it as resources linked with services).

    ------------------------------
    Sergey Lukin
    T-Systems
    ------------------------------

    Original Message


  • 4.  RE: Authentication factors and Users, Roles ABE

    Posted May 25, 2018 07:23
    Most probably I will link them to Resources and ResourceUser. I found as well GlobalConfiguration entity in Reource domain with the following attributes: devicePassword, deviceSecretPassword, vtyPassword and snmpPassword.

    ------------------------------
    Aleksandr Veremkovich
    Telekom Austria AG
    ------------------------------

    Original Message


  • 5.  RE: Authentication factors and Users, Roles ABE

    TM Forum Member
    Posted May 29, 2018 04:48
    GlobalConfiguration is it a part of Resource (device) configuration and all credentials here only for management this device.
    From my point of view it is wrong place for storing end user credentials here.

    ------------------------------
    Sergey N Lukin

    ------------------------------

    Original Message