LemonLDAP::NG, advanced training

The aim of this training course is to give you all the skills you need to manage all the advanced features of LemonLDAP::NG on a day-to-day basis.

Learn how to configure and use LemonLDAP::NG in a complex environment during this 3-day training course..

These days, identity management is everywhere, whether in web applications or within companies.

LemonLDAP-NG, the open-source identity and access management (IAM) solution associated with the implementation of standard exchange protocols such as CAS, SAML and OpenID Connect.

You'll emerge from this LemonLDAP::NG advanced training course with the skills needed to manage LemonLDAP::NG's advanced features on a day-to-day basis, as well as the ability to respond to requests for integration with business applications.

This hands-on, advanced LemonLDAP::NG training course is aimed at anyone responsible for identity management, wishing to learn how to configure and integrate the advanced features of LemonLDAP::NG into an existing IS.

At the end of the course, participants will leave with a good understanding of SSO protocols and advanced configuration of LemonLDAP::NG and its interactions with existing IS.

Terms and rates :

Course duration :
Face-to-face : 3 days or 21 hours

Rates :
Intra-company : 3,900 euros excl. France, Belgium, Luxembourg and Germany.

CNLESR members in France benefit from a 10% discount.

As soon as we receive your registration, we'll contact you to schedule your training.

Objectives :

Manage access control to Web applications protected by LemonLDAP::NG
Understand LemonLDAP::NG architecture and how it interacts with existing information systems
Install and configure LemonLDAP::NG for authentication across multiple OpenLDAP and Active Directory backends
Know the services and use cases of CAS, SAML, OpenID Connect and Kerberos
Master the syntax and semantics of SAML and OpenID Connect
Diagnose and analyze anomalies
Analyzing a SAML frame and OpenID Connect
Monitor, backup and restore services

Target audience :

System and network administrators
Digital architects
Business application integration managers
In-house application developers

Prerequisites

Bring your own laptop
VirtualBox version 7 installed
Putty must be installed on a Windows workstation
Basic knowledge of the Linux system
Basic knowledge of openldap console use is a plus
How to use a text editor in console mode
Knowledge of ssh, sftp and the Linux operating system
Completion of the LemonLDAP-NG technical training course

Speaker:

Jean-Louis Brehier

Expert LemonLDAP::NG

Day 1 : SSO history, concepts and protocols

● Introduction
○ History
○ Why LemonLDAP-NG? How does it work?
○ Operating principles
● Fundamentals of identity and access management
○ What are IAM, IGA ,AM, PAM and ADMgmt?
● Presentation of standard exchange protocols: CAS, SAML and OpenID Connect, Kerberos
● Study and application of CAS, SAML, OpenID and kerberos
○ When and how to use CAS, SAML, OpenID Connect and Kerberos?

Putting it into practice LemonLDAP-NG presentation, differentiation between IAM, IGA, AM, PAM and ADMgmt, study of CAS, SAML, Oauth, OpenID Connect and Kerberos unified authentication protocols.

Day 2 : Cadvanced configuration of LemonLDAP-NG

● Configuration mode CLI or Web
○ SSL configuration
○ Application portal configuration
○ Configuring an OpenLDAP backend
● Advanced SAML configuration
○ Configuring a SAML identity provider (IDP)
○ Configuring a SAML service provider (SP) on common web applications.
● Additional backend configuration
○ Configuring a Kerberos backend for ActiveDirectory
● Identity federation management
○ Joining a federation
○ Mass import metadata script
○ Automate metadata import

Putting it into practice Advanced SAML and Federation configuration exercises, Kerberos configuration for ActiveDirectory.

Day 3 : Operations, Safety

● Operating
○ Modification of authentication rules and HTTP headers
○ Tests and behavioral analysis
○ SAML frame testing and analysis
○ Troubleshooting
● Configuring multi-factor authentication
○ TOTP
○ USB security key
○ WebAuthn

Putting it into practice Advanced exploitation of LemonLDAP::NG. Advanced security