IDaaS developer-friendly design
Simple configuration alone delivers value for many enterprise identity management use cases. Medium and large enterprises that want the full value of IDaaS often still need to build integrations with IDaaS so that identity data in some systems can be identified and exchanged. IDaaS recognizes how important a "developer-friendly" experience is for enterprises that adopt a modern cloud identity service.
To help enterprise developers, IDaaS provides a set of developer-oriented features that simplify integration and lower the barrier to entry, delivering an inclusive service that suits different enterprises.
Feature 1: Development capabilities organized around applications
For easier management and understanding, all developer integration features are organized around applications in IDaaS.
The Unified permission feature is labeled "future version" and is not supported in the current version.
IDaaS exposes the following capabilities for application integration:
|
Scenario |
Core capability |
Description |
|
Unified logon |
Single sign-on (SSO) |
Applications delegate logon to IDaaS so that all applications across the enterprise share a unified logon entry point and logon experience. |
|
Unified account |
Account and organization synchronization |
Inbound (application to IDaaS) and outbound (IDaaS to application) synchronization settings let identity data flow between systems and be centrally managed. |
|
Unified permission |
Permission system management |
In-application permissions such as menus, buttons, and data can be centrally hosted and authorized in IDaaS based on role-based access control (RBAC). |
Scattered features are hard to manage, and centralized features are easy to integrate. All features that require development integration are listed in the application management menu and can be configured all at once.
On the configuration page of a custom application, integration features are organized into four tabs: General Settings, Logon & Access, Account Provisioning, and API Exposure. The Logon & Access tab contains two sub-tabs: Single Sign-on and Authorization.
Feature 2: Open-source code
IDaaS provides sample code for use cases such as SSO integration, OIDC device flow integration, and account synchronization integration. You can download, review, and reuse the code. For details, see Open-source References.
Feature 3: SDK and sample code
For different use cases, IDaaS provides management guides, development guides, SDKs, and sample code, as summarized in the following table:
|
Scenario |
Management guide |
Development guide |
Sample code |
|
Integrate an application with SSO |
Integrate SSO for custom applications GitHub open-source: Sample for custom application integration |
||
|
Synchronize from IDaaS to an application |
Sample: Integrate account synchronization into a Java application GitHub open-source: Sample for receiving events and synchronizing to RAM |
||
|
IDaaS open APIs |
Alibaba Cloud OpenAPI Portal — IDaaS For details, see the following section. |
Highlight: Open API SDK downloads and sample code
For its open APIs, IDaaS provides SDK downloads and sample code in as many languages as possible (Java, Python, Go, PHP, C#, C++, and TypeScript).
Go to the Alibaba Cloud OpenAPI Portal — IDaaS. In the left-side navigation pane, switch between APIs. In the right-side pane, select a language and click Download Project, and then follow the code in the project to install, use, and call the SDK.
Feature 4: Online API debugging
All APIs that IDaaS exposes support online debugging. You can enter parameters, dynamically render sample code, and run the call directly in a browser to view the results.
On the Alibaba Cloud OpenAPI Portal — IDaaS, go to the API Debugging menu. In the center pane, enter the actual parameters for the API call. After the call completes, you can view the returned parameters on the Response tab in the right-side pane. If you call an API that creates an account or modifies organization information, you can also view the actual changes in the IDaaS instance.
For example, select the GenerateToken (generates an authentication token) API. In the center pane, enter the required parameters instanceId, applicationId, and grant_type. In the right-side pane, switch between languages such as Java, PHP, and Python to view the SDK sample code.