Skip to main content
Version: 4.18.1

Architecture

Overview​

mID Provider(IAM) can be enabled with following architecture modes.

Simple Architecture Overview​

Architecture Overview

Cluster Architecture Overview​

Clustered operation mode is used when you want to run mID Provider(IAM) and Connectors within a cluster. This mode requires that you have a copy of the mID Provider(IAM) and Connectors distribution on each machine you want to run a server instance. This mode can be very easy to deploy initially for few machines cluster, but can become quite cumbersome for very large cluster solutions. To make a configuration change you will have to modify each distribution on each machine. For very large scale operation, domain cluster or cross datacenter operation mode should be selected.

Architecture Cluster Standalone

Consolidated Endpoints​

Endpoint NameComponentURI
Well Known ConfigurationmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/.well-known/openid-configuration
Authorization EndpointmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/auth
Token EndpointmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/token
Token introspection EndpointmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/token/introspect
Userinfo EndpointmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/userinfo
Logout EndpointmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/logout
JWKS URImID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/certs
Check Session IframemID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/protocol/openid-connect/login-status-iframe.html
Client RegistrationmID Provider(IAM)/OIDChttps://{baseurl}:8443/auth/realms/{realm}/clients-registrations/openid-connect
User Management REST APImID Provider(IAM)/Admin REST APIhttps://{baseurl}:8444/auth/admin/realms/{realm}/users
Master Admin DashboardmID Provider(IAM)/Admin Dashboardhttps://{baseurl}:8444/auth/admin/
Tenant Admin DashboardmID Provider(IAM)/Admin Dashboardhttps://{baseurl}:8444/auth/admin/{realm-name}/console
SignatureBusiness Logichttps://{baseurl}:8443/auth/realms/{realm}/digitanium/signature
Account ProfileBusiness Logichttps://{baseurl}:8443/auth/realms/{realm}/users/{userid}/profile
Admin DashboardPortainerhttps://{baseurl}:9000
SSMS ManagementSSMShttps://{baseurl-maschine2}:8443/ssms-gui/soap/mgt/asm/AsmManagementWs
Security ChannelSSMShttps://{baseurl-maschine2}:8444/ssms-services/asm/rest/device
SSMS ServicesSSMShttps://{baseurl-maschine2}:8445/ssms-services/soap/svc/asm/AsmServicesWs
Config UtilitySSMShttps://{baseurl-maschine2}:9000

Consolidated Ports​

Public​
PortTransport LayerApplications LayerComponentRelation
8443TCPHTTPSmID Provider(IAM)/OIDCfrom Application to mID Provider(IAM) OIDC
8444TCPHTTPSSSMSfrom mID SDK to SSMS
8445TCPHTTPSmID Business Logic (Resource Server)from Application to Business Logic
Private​
PortTransport LayerApplications LayerComponentRelation
8444TCPHTTPSmID Provider(IAM)/Admin DashboardAdmin from browser to Admin Dashboard
8446TCPHTTPSmID Connector APIfrom mID Provider(IAM) to mID Connector
9000TCPHTTPPortainerCollect Docker Container informations
45688UDPJGROUP ClusterTransport between mID Provider(IAM) nodes to exchange cache information with Infinispan´s nodes.
8445TCPHTTPSSSMS ServicesSOAP Operation Tasks
8443TCPHTTPSSSMS ManagementSOAP Management Tasks
9000TCPHTTPConfig UtilityConfiguration Tool
7600-7610UDPSSMS - JGROUP ClusterTransport between SSMS nodes to exchange information.
12001-12010TCPHTTPSSSMS - GOSSIP ServerInitial Membership Discovery of SSMS nodes
Local​
PortTransport LayerApplications LayerComponentRelation
6379TCPHTTPREDISfrom mID Connector to mID Pooler