Enterprise Identity Management on Rails
summary
Customer contract covers 5000 seats and reality is 100 hires or departures per week, so the app implements SCIM 2.0 and SAML with OmniAuth multi-provider, scim_engine for endpoints, Okta integration, Keycloak and ngrok for debugging, and RSpec plus BlazeMeter/Runscope tests. Just-in-time provisioning, email inheritance and deprovision race conditions get fixed; manual Okta QA and docs take about five weeks to approval. Observability and careful deletion policy decide whether automation actually works.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:37Design Considerations
- 5:03Observability
- 6:01Omniauth
- 9:04SAML
- 16:15Skim
- 20:01Skin Gems
- 27:30Testing
related talks
57mSecurity and Identity: Ruby, CAS, and OpenID
35mIdentity and Access Management for the Decade Ahead
32mI am what IAM - the testing challenges of digital transformation
55mBalance least privilege & agile development
21m15 MINUTES RAILS APPLICATION
20mBuilding a Resilient MFA Framework: Strategies and Best Practices
45mTemporary Access to the Cloud: A Case Study
40mThe Life and Death of a Rails App