🛢️ Database (JDBC)
Direct database connectivity supporting identity governance through standardized JDBC protocols with comprehensive security controls.
Overview
Some applications or homegrown systems rely on relational databases to store user and entitlement data. Lumos can connect via JDBC to read and write identity information directly at the database level, bypassing the need for an intermediate API. This approach is particularly useful for proprietary or legacy applications that expose limited or no API capabilities.
This pattern supports any database platform using JDBC including Microsoft SQL Server, MySQL, Oracle DB, PostgreSQL and MongoDB, providing both read and write capabilities with comprehensive security controls.
Real-World Example
- Scenario: A manufacturing services company needs to integrate identity governance with a custom application application storing user entitlements in a Microsoft SQL Server database.
- Outcome: Successfully established automated governance over database-driven entitlements while maintaining strict security controls.
- Implementation: Configured secure JDBC connection, implemented custom SQL queries for identity operations, and established automated reconciliation processes.
Benefits
- Data Transformation: Flexible SQL queries to join tables, transform data, and apply business logic during ingestion or provisioning.
- Universal Connectivity: Support for all major database platforms
- Performance Optimization:Efficient handling of large data volumes
Considerations
- Requires installing and configuring the Lumos Agent on-premise, which may involve firewall rules and server provisioning
- Should implement proper architecture for high-availability
- May need to optimize query performance for very large datasets
- Should implement proper error handling and rollback procedures
Updated 15 days ago