Page Comparison

Outboard integration - Security concept for decentralized deployment

Image Modified

Outboard integration - Security concept for centralized deployment

Outboard’s security concept distinguishes two borders of data flow:

1. Archiving client to Outboard,
2. Outboard to External Storage

Security concept of communication – Archiving client to Outboard

To prevent unauthorized access Datavard Outboard DataTiering is built to comply with the SAP authorization concepts, where each connection carries out an authorization check.

...

Level of security at this border is generally lower than at the outbound border towards external storage because its typically within internal corporate network.

Security concept of communication – Outboard to External Storage

Outbound communication with an external storage, MUST be secured. This is achieved using secured protocol that is storage platform-specific and therefore depends on API utilized by corresponding Storage Management connector implementation (e.g. HTTPS, Secured NFS, etc.). Additionally, authorized access is controlled using platform-specific authentication / authorization concept, e.g. using Kerberos, Active Directory and others together with user permission management.

Authorizations & Segregation of duties

The Outboard Service requires 2 users

• Maintenance: Administrator dialog user
• Operation on data: Service user – used in Outboard HTTP Service definition