UiPath Identity Server 是一项服务，可跨 UiPath 产品提供集中式身份验证和访问控制。其目的是为所有 UiPath 产品和服务的身份验证以及授权的某些方面提供一致的体验和同等的功能。对于 Identity Server，这些产品和服务被视为客户端。
通过 Identity Server 的集成，其客户端具有共享的入门和用户管理经验。在后台，通过 Identity Server 执行身份验证，Identity Server 提供单点登录体验，并生成令牌以通过 API 与其他产品进行通信。用户登录后，Identity Server 将在访问其他产品或服务时无缝执行调用。注销体验与此类似 - 用户退出一个客户端后，Identity Server 会对所有其他客户端执行退出调用。
Identity Server also acts as a federation gateway, supporting external identity providers, thus shielding its client applications from details of how to connect to these external providers.
Identity Server offers Authentication as a Service, containing the centralized login logic and workflow for all its integrated applications. Built in .NET Core 3.1 on top of IdentityServer4 open-source library, and supporting OpenID Connect and OAuth 2.0 frameworks, IS makes it easier for any services to integrate with each other over one standard protocol family: OAuth.
Orchestrator 集成
Orchestrator is fully integrated with Identity Server and they are installed together. For Orchestrator, this integration means that:
-
登录 Orchestrator 的操作是通过 Identity Server 进行的，而不是通过外部身份提供程序进行。
-
Orchestrator 可以使用由 Identity Server 生成的用户访问令牌、服务到服务 (s2s) 访问令牌和机器人访问令牌。
-
Email confirmation and password recovery moved to Identity Server.
-
Orchestrator 可以向 Identity Server 传播数据，也可以从 Identity Server 读取数据。在 Orchestrator 中创建用户或租户时，将在 Identity Server 中自动创建该用户/租户的条目。机器人信息和某些设置也将传播到 Identity Server。用户登录尝试会从 Identity Server 发送到 Orchestrator。
备注：为了使用 SSO 登录 Orchestrator，用户/租户必须同时存在于 Identity Server 和 Orchestrator 数据库中。
设置
Identity Server 的设置可以配置如下：
-
A series of settings are configured during installation. Read about it here.
-
In-depth configurations specific for your environment are performed within its appsettings.json file.
-
External identity provider specific settings are configured within its Identity Management portal, within its External Identity Providers page.
重要提示：在 Orchestrator 的安装或升级过程中，必须使用 Identity Server。如果没有，则不支持 Orchestrator 部署。