Constructing an Attribute-Based Search Subsystem for Identity Management Systems when Implementing Integration Solutions

Abstract

This paper addresses the problem of designing an attribute-based search subsystem when integrating an identity management (IDM) system with modern complex systems (e.g., enterprise resource planning (ERP) systems) that have granular access control. When implementing integration solutions with a large number of roles and users, the context search preset in IDM systems proves to be inadequate. We propose and implement a solution to this problem that consists in changing the approach to the organization of a role search and description and present an approach to determining the optimal number of attributes required for an efficient search.