Skip to content

JIM Content – CLAUDE.md

What is JIM?

JIM (Junctional Identity Manager) is Tetron’s self-hosted enterprise Identity Lifecycle Management (ILM) platform. It synchronises identity data between connected systems through a central “metaverse” hub. Built with .NET 10.0, Blazor Server (MudBlazor 9), and PostgreSQL 18. Deployable via Docker, including air-gapped environments.

Authoritative Context Document

For up-to-date technical details, architecture, status, and terminology, reference:

Fetch this document (via WebFetch using the raw URL) before making substantive changes to JIM content on this site.

Key Facts for Content Accuracy

  • Status: Currently at v0.10.0, approaching v1.0. Validated at 100,000+ object scale.
  • License: Source-available (free non-production, commercial for production)
  • Stack: .NET 10.0, EF Core, PostgreSQL 18, Blazor Server, MudBlazor 9
  • Auth: OpenID Connect (OIDC) with PKCE – no local accounts. Federated sign-out supported.
  • Deployment: Docker containers (non-root, hardened, digest-pinned), air-gapped capable, one-command installer
  • Language: British English (en-GB) throughout – synchronisation, authorisation, behaviour, etc.
  • Security posture: OWASP Top 10:2025 assessed; SHA-pinned GitHub Actions; AES-256-GCM encryption at rest; log-injection-safe

Core Scenarios

  1. Joiner/Mover/Leaver (JML) automation
  2. Attribute writeback to HR systems
  3. Centralised entitlement management
  4. Domain consolidation and migration
  5. Identity correlation across disparate systems

Available Connectors

  • LDAP / Active Directory (full CRUD, import & export)
  • File (CSV/Text, import & export)
  • Planned: SCIM 2.0, SQL databases, PowerShell, REST/Web Services

Key Capabilities

  • 17 API controllers, 140 endpoints (interactive Scalar reference at /api/reference; public reference at https://tetronio.github.io/JIM/api/reference/)
  • 90+ PowerShell cmdlets for automation
  • Scheduler with cron/interval triggers
  • Credential encryption (AES-256-GCM at rest)
  • Change history/audit with timeline UI
  • Sync outcome graph with causal tracing
  • Bounded-memory sync/export pipelines validated at 100,000+ objects (Scale100K integration test suite)
  • Fast count endpoints for dashboards and SIEM integration (metaverse, connector space, pending exports)
  • Role membership API with safety checks that prevent removing the last administrator
  • Service Name and Service ID for instance identification across portal, logs and telemetry
  • Predefined Search enable/disable toggle (keeps searches without deleting them)

Content in This Directory

  • _index.md – Main JIM product page on tetron.io
  • Images referenced via shortcode (source images in assets/images/)

Writing Guidelines

  • Keep marketing tone – this is the public-facing product page, not developer docs
  • No internal jargon or implementation details. All JIM content on this site must be pitched as product marketing: copy that informs a prospective buyer and helps sell the product. If a line would only mean something to someone reading the source code (class names, ORM flags, query patterns, framework internals, etc.), it doesn’t belong here. Translate the outcome for the reader, or drop it.
  • Use British English spelling consistently
  • Verify any technical claims against the AI context document linked above
  • Screenshots use the resized-figure shortcode (images must be in assets/images/)