veyepar: Integrating Python Apps with Centralised Identity Management Systems

Author(s):	Fraser Tweedale
Location	Track 1
Date	sep Sat 05	Days Raw Files
Start	14:30	First Raw Start	error-in-template
Duration	00:30:00	Offset	None
End	15:00	Last Raw End
Chapters
Total cuts_time	None min.

https://kiwi.pycon.org/schedule/presentation/86/
raw-playlist raw-mp4-playlist encoded-files-playlist mp4 svg png

assets release.pdf Integrating_Python_Apps_with_Centralised_Identity_Management_Systems.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Most Python web developers are familiar with authentication and
authorisation on the open web, but the requirements and technologies
used inside companies and large organisations are different:

* Identities and groups are probably stored in an external identity
management system's directory rather than in an application's
database tables.

* Authorisation decisions will be based on group membership and
policies that are defined outside the application.

* Users may be expected or required to use a *single sign-on*
technology such as Kerberos or SAML to authenticate to
applications.

This talk will familiarise the audience with these technologies and
demonstrate how Python web applications can be integrated with an
identity management system to meet business requirements while
providing a positive user experience.  Particular technologies
covered will include:

* [FreeIPA](https://www.freeipa.org): an open-source identity
management solution, for defining users, groups and authorisation
policies

* [mod_auth_gssapi](https://github.com/modauthgssapi/mod_auth_gssapi) /
mod_auth_kerb: Apache modules for Kerberos authentication

* [mod_lookup_identity](http://www.adelton.com/apache/mod_lookup_identity/): Apache
module to retrieve user information from a directory

The talk will conclude with discussion about upcoming Kerberos
features, techniques for dealing with multiple authentication
methods, and progress in making identity management integration
easier for Python (and in particular, Django) developers.

People developing or deploying Python web applications in business
environments or for large open source projects with centralised
identity management will get the most out of this talk.

Comment:

production notes