Tyk Identity Broker (TIB) by Tyk is a component that connects various Identity Management Systems like LDAP, Social OAuth (e.g., GPlus, Twitter, GitHub), or Basic Authentication providers to your Tyk installation. TIB serves as a bridge between the API Gateway, Tyk Portal, or Tyk Dashboard, facilitating the integration of custom IDMs. Starting from Tyk v3.0, TIB is a built-in feature of the Tyk Dashboard. You no longer need a separate instance of the service for the Dashboard. You have two options: Internal TIB, which is embedded in the dashboard with easy configuration and shared port, and External TIB, which is installed as a separate component for advanced use cases, requiring config file changes and a separate port. With Tyk Identity Broker and an IDP, you can enable easy access via social logins to the developer portal and internal access to the dashboard via LDAP/ActiveDirectory. It provides a simple API for traffic, matching requests to a profile that exposes an Identity Provider to authorize and validate a user, and an Identity Handler to authenticate a user with Tyk. Identity providers can be anything that implements the tap.TAProvider interface. Bundled with TIB are four provider types: Social - OAuth handlers for popular social logins (Google, Github, Bitbucket); LDAP - validates a username and password against an LDAP server; Proxy - forwards requests to a third party with validators for response success; SAML - authenticates against a SAML IDP. Identity Handlers perform actions after a provider validates an identity. Action types include GenerateOrLoginUserProfile, GenerateOrLoginDeveloperProfile, and GenerateOAuthTokenForClient. Tyk Identity Broker handles integrations with third-party IDPs, providing a bridge between various Identity Management Systems to your Tyk installation.
