Architecture
Shared records
A domain, a person and an organisation each have one id that every CobraSphere product uses, so all products mean the same thing.
CobraSphere products do not each keep their own idea of a domain, a person or an organisation. Each has one id, and every product that holds it uses that same id.
One domain id from the Directory Service, used by the claim in Identity and by ZoneAudit.
One id each
| Record | Where its id comes from | Who uses it |
|---|---|---|
| Domain | The Directory Service, found by the domain's exact name | Identity for domain claims, ZoneAudit for scans and findings |
| Person | The identity service, one per CobraSphere ID | Every product a person signs in to |
| Organisation | The identity service | Identity for roles and claims, ZoneAudit for the organisation that holds a claim |
Domains
A domain's id comes from the Directory Service. When a product needs the id for a name, it asks for the record with exactly that name and never takes a near match. So example.com always means example.com and never www.example.com.
- The identity service stores each domain claim with that id.
- ZoneAudit stores its Domain under the same id.
So a claim in Identity and a domain in ZoneAudit always mean the same domain.
A verified claim reaches ZoneAudit
When a person opens ZoneAudit, it reads the claims of their organisations from the identity service. If one of those organisations holds the domain through a verified claim, ZoneAudit links its Domain to that claim and shows the results. Nothing else needs to be done by hand.
People and organisations
A person is known by the same identity id in every product. ZoneAudit, for example, records the people of the business that holds a domain with their identity id and the id of their organisation, so a finding is assigned to the same person the identity service knows.