OnPrem

For on-premises deployments, we provide a robust, enterprise-grade identity and access management solution that puts you in complete control of your authentication infrastructure. This self-hosted authentication system offers numerous advantages:

• Complete Control: Maintain full control over your authentication infrastructure, user data, and security policies within your own environment.

• Enterprise Integration: Seamlessly integrate with existing enterprise identity providers and directory services like LDAP and Active Directory.

• Comprehensive Protocol Support: Support for multiple authentication protocols including:

  • OAuth 2.0

  • OpenID Connect

  • SAML 2.0

  • LDAP

  • Kerberos

• Advanced Security Features:

  • Multi-factor authentication (MFA)

  • Brute force protection

  • Session management

  • Password policies

  • User federation

• Customization: Tailor the authentication flows, themes, and user experience to match your organization's requirements.

Customer Responsibility

For on-premises deployments, customers are responsible for:

• Setting up and maintaining the authentication infrastructure

• Managing user accounts and access controls

• Configuring security policies and protocols

• Ensuring proper backup and disaster recovery

• Monitoring system health and performance

• Keeping the authentication system updated and secure

The authentication management console is typically accessible at <on-prem-manager-url>/observo-auth and can be maintained by any organization admin responsible for the authentication system.

Integration with Observo

The authentication system integrates seamlessly with the Observo platform while maintaining complete isolation within your infrastructure:

1. Configuration: Set up the authentication server within your network perimeter

2. Integration: Configure Observo to use your authentication endpoint

3. User Management: Manage users and access through your authentication system's admin console

Customers will soon be able to integrate their authentication management solution with Observo using OpenID Connect (OIDC), with this feature planned to roll out in the coming days.

Security Best Practices

We recommend following these security best practices:

• Regularly update the authentication system

• Implement strong password policies

• Enable multi-factor authentication

• Monitor authentication logs

• Regularly audit user access and permissions

• Maintain secure backup procedures

• Use SSL/TLS for all communications

By choosing our on-premises authentication solution, you maintain complete sovereignty over your authentication infrastructure while benefiting from enterprise-grade security features and seamless integration capabilities.