Modules
Last modified by Martin Kolombo on 2026/08/27 16:57
The Architecture of CzechIdM is highly modular. The core module serves as a basic module and is essential for the application run. All other modules are usually dependent on the Core module. The Acc module users Core module services and is also very important to the application, but the application can run with the module turned off. The module takes care of user accounts on connected systems. Usually the module is ON on almost all cases. Other important module for the application is IC module. It manages the communication with the connected systems. The module is ON in almost all cases.
Except basic application modules, there are other complementary modules available.
| Basic application modules | description | documentation | license | available |
|---|---|---|---|---|
| core | Application core - basic services, entities and REST interface | documentation | MIT | for free |
| acc | user account management | MIT | for free | |
| ic | Connectors for the communication with other systems. At the time mainly ConnId project connectors are supported. | ic-connectors | MIT | for free |
| example | Example module, servers for new developers as example | MIT | for free | |
| vs | Virtual systems - manage accounts on systems via tasks | Modules - Virtual systems [vs] | MIT | for free |
| rpt | Reports module. Interfaces for creating new reporst | Modules - Reports [rpt] | MIT | for free |
| extras | Contains various features, which are not suited to be in any other module | modules_extras | MIT | for free |
| Complementary modules | description | documentation | license | available |
| reg | Users registration to CzechIdM via web GUI | Modules - User registration [reg] | paid | |
| ca | Internal certificate authority with RESTful API (deprecated - use crt instead) | Modules - Certificate authority [ca] | paid | |
| openam | OpenAM user authentication, user data exchange | Modules - OpenAM authentication [openam] | paid | |
| pwd-reset | Password reset module. User can reset lost password via email link | Modules - Password reset [pwd-reset] | paid | |
| reports | Reports module. Admins can prepare a report of users or roles and download it | Modules - Implemented reports [reports] | paid | |
| rec | Recertifications module that allows admins to run recertification campaings, or automatically schedule them. | Modules - Recertification | paid | |
| crt | Managing of certificates and certificate authorities | Modules - Certificates [crt] | paid | |
| sms | Sms gateway module with implementation of some gateways | Modules - SMS [sms] | paid | |
| tech | Technical accounts managing | Modules - Technical accounts [tech] | paid | |
| prp | Property and License - manage a list of property or licenses via IdM roles | Modules - Property and licences [prp] | paid | |
| pwd-sync | AD Domain Password synchronization to IdM (ctrl+alt+del) | TODO | paid | |
| ntf | Notifications - sending notification to users after executed events | Modules - Notifications [ntf] | paid | |
| gdpr | Archives or deletes users from IdM | Modules - GDPR | paid | |
| pam | Privileged Account Management | Modules - PAM | paid | |
| comp | Compliance | Modules - Compliance [comp] | paid | |
| bsc | Business Card | Modules - Business cards [bsc] | ||
| Future modules | description | documentation | license | available |
| ms-teams-module | Managing Microsoft Teams | Modules - MS Teams | paid | |
| ms-spo-module | Managing Microsoft SharePoint Online sites | Modules - MS SharePoint Online | paid | |
| ms-exo-module | Managing Microsoft Exchange Online | Modules - MS Exchange Online | paid |
In CzechIdM modules can be switched on and off in GUI.