Authentication & Authorization
Manage your users‘ digital identities and control access to your services with our ecosystem Perun.
Identity and Access Management System
In terms of user digital identities, Perun provides you with a set of applications for managing the identity lifecycle, tools to make use of various existing user accounts, and user self-management.
As for access control, our ecosystem gives you the ability to define authorization rules, manage authorization data, and control access to your resources via user categorization and a data provisioning mechanism.
Perun is being developed as a joint effort of Perun Team and the CESNET association.
Flexibility of Use
We implement our tools as business area agnostic. Any organization, project, or even person who requires performing operations in the area of Identity Management and/or Access Control is a potential customer.
Perun is being developed in an academic environment, but this does not pose any limit to using it in the commercial sphere. The whole ecosystem is provided as an Open-Source solution, meaning anybody can review the code base, contribute to it, and use the implementation freely.
Do you have many systems playing different roles in your ecosystem? Are they hard to integrate with each other? If you find a subset of your use cases in the lists below, Perun might be the right tool to use.
- Making use of existing user digital identities (university accounts, social network accounts, local accounts)
- Managing access and authorization in a central place
- Defining and managing user digital identity lifecycle
- Identity proofing, utilization of frameworks focusing on identity assurance
- Performing authorization on a local and distributed level
- Relying on standardized solutions, especially Authentication and Authorization protocols like SAML, OpenID Connect, OAuth2
- Provisioning authorization data to downstream Relying Services or other components of your infrastructure
Examples of Collaborations
We have helped many important organizations reach their plan for managing user access to their resources. Now more than 400 smaller or bigger organizations use our system. All organizations can operate the system without the necessity of further intervention. Moreover, we help these organizations by providing them with technical support, consultations, or development support.
e-INFRA CZ is a unique research and development e-infrastructure in the Czech Republic. Perun and the tools built around it play a key role in managing user identities, categorization, authorization in a central place, as well as acting as a joint point to integrate Identity providers and services while providing a unified access experience.
The European Open Science Cloud (EOSC) is a European initiative aimed at developing an infrastructure supporting open science practices in research data management. Perun plays a critical role in the area of managing access and user identity management. It creates a single place where all participating RI user bases are managed, enabling them to create a unified experience in accessing the services.
LifeScience is a pan-European research infrastructure for life sciences. RIs address the grand challenges of health and ageing, spanning a broad range of scientific disciplines. Our AAI solution, built on top of Elixir and BBMRI-ERIC projects, plays a facilitating role. By removing the burden of implementing authentication and authorization on RIs side, we create a predictable environment for researchers, enabling them to easily connect to world-class resources and focus on their groundbreaking research.
Have you decided to use our tools, or are you just interested in how we do things? Want to discuss a specific problem with us? Feel free to contact us.
Regarding documentation, we've got you covered. Our documentation provides both user and technical information to assist you in your work with Perun.
Source code of Perun is available for your viewing pleasure on GitHub. Take a look and see for yourself the behind-the-scenes work that goes into making Perun a top-notch tool.