eBay
Internal Client Interview for Security Domain (IDM/IGA):
Technical Round-1:
- Explain basics of IGA backend components like workflow, notification etc.
- Have you worked on Groovy scripts or Java scripts?
- Any knowledge on test automation framework?
- OIDC (open id connect) framework for SSO?
- Explain OAuth configurations setup?
- What about MFA , how do you perform setup for same?
- Coding Round: I want to check whether input string has balances character like ( < { } > )
import java.util.Stack;
public class MyDomain {
// ()
// {[]}
// {[(]}
public static void main(String[] args) {
// ===>> Brute Force method
// Data -> For each Char scan
// Put in any collection
// Check if next char is open or close
// Check if char is equal -> true else -> false
String str = "{[(]}";
System.out.println(isValid(str));
}
private static boolean isValid(String str) {
Stack<Character> stack = new Stack<>();
for (char ch : str.toCharArray()) {
if (ch == '(' || ch == '[' || ch == '{') {
stack.push(ch);
} else if (ch == ')' || ch == ']' || ch == '}') {
if (stack.isEmpty()) {
return false;
}
char openBracket = stack.pop();
if (!isMatchChars(openBracket, ch)) {
return false;
}
}
}
return stack.isEmpty();
}
private static boolean isMatchChars(char openBracket, char closeBracket) {
return (openBracket == '(' && closeBracket == ')') ||
(openBracket == '{' && closeBracket == '}') ||
(openBracket == '[' && closeBracket == ']');
}
}
Round-2:
- Explain basics of IGA backend components
- Design interfaces APIs / Role Management: Rest API Interfaces
- CRUD ->
Role - Members -
/user/:roleName
/user/:uid/roledetails
OAuth-2:
/OAuth/token
idtoken -> credential
External consumer (Stored uid/pwd) -sa
Resource owner
-> Capabilites
-> Sprights
persmission [
/endpoint1
/endpoint2
]
Authorization
Access_token
refresh_token (time based)
JWT
Header
Payload
IGA -> Concepts (How you will design the system from scratch) Explain in detailed component/feature wise:
Users -> Subordinated/Hierarchical/Manger path
Role/Entitlement (Catalog)
Access review (Certification)
Policy violation (SOD, Password policy)
Request access /approval
-> Self service
-> Raised for other (
Workflow -> integration script -> trigger email
Track request ->
Notification -> Email
Explain if worked on any test automation - Mock - framework?
Selenium -> Cypress frame -Ui testing
Junit
Postman automation
Karate framework (Load/Performance/API testing)
Write a program for Spell checker -> Explain approach and solutioning
Input string : "Goole"
Comments
Post a Comment