Chapter 8. Identity Stores
In the previous chapters we have extensively called out the various identities including user, group, and role objects in the examples. All these identities must be stored in a backend data repository in order to be accessed by OpenSSO. It is worth remembering that this identity store is different from the configuration store (policy store).
The Identity Repository framework provides interfaces that will be used by OpenSSO services such as Authentication, Authorization, and Federation to manipulate identity configuration attributes along with certain service configuration values such as the agent profiles, even though the agent profiles are stored in the configuration store.
The Identity Repository framework has a utility ...