You missed authentication system as well.

There is a DB for storing the information.

There is a Web App that uses OAuth to authenticate.

There is a OAuth service (OSP) that is called into for authentcation.

All three can be on the same box.  Or seperate.  Probably easiest to keep web components (Web app and OSP) on the same server and have the DB server standalone.

The Web App defines connections to systems to pull in Identities and Accounts (with permissions). 

Identities can be used to login with (So eDir or AD usually).  Accounts can be things that have permissions (So could be the same eDir and AD again as used for Auth).

.

Hi Nguyen Van Dung,

additionally to Goeff's explanation, you can have a look here in the docs:

IGA on-prem

https://www.microfocus.com/documentation/identity-governance/4.2/install-guide/t49vlsgx9sou.html

Worksheet:

https://www.microfocus.com/documentation/identity-governance/4.2/install-guide/b1e56ljg.html

IGA SaaS

https://www.microfocus.com/documentation/identity-governance-and-administration/igaas/quick-start/quick-start.html

User Guide:

https://www.microfocus.com/documentation/identity-governance-and-administration/igaas/user-guide/introduction.html

Best regards,
Philipp

Thank you for your response

Many thanks, Philipp