Identity Relationship Management - The Right Approach for a Complex Digital World Webinar

© 2016 ForgeRock. All rights reserved.

Identity Relationship Management The Future's So Bright, I Gotta Wear Shades

Daniel Raskin, SVP Product Management Chris Kawalek, Director of Product Marketing


Relationship Management


Iden%ty

Users


Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Iden%ty

Users, Devices, Things & Services


Identity Management Evolves to Relationship Management

Identity Lifecycle Management Users, Devices, Things & Services


Contextual Identity


Contextual Security Taking Safety to the Next Level

Passwordless Authentication

Register Device for First Time

Authorise consent child purchase

Authorise family members to use account

Authorise Data to Device / Thing


Did you just request to transfer $1,000,000.

Taro is trying to purchase Footloose on Amazon .

Is that ok?

Kayoko is reques%ng access to your car

Are you trying to open your front door?

We no%ced your are accessing our service on a iPhone. Would you like to register this device?

Would you like to authorise purchasing Show%me on your Samsung TV?

Contextual Identity Enriching the Experience


Contextual Identity Authentication, Authorisation and Consent

User Managed Access Sharing X-Ray with Doctor


Microservice Architecture


SOA is Dead, but Services on the Rise!

1990s and Early Pre-SOA

Monolith to change

2000s Traditional SOA

Autonomous but coordinated

Present Microservices

Decoupled and Independent

PWC, Agile coding in enterprise IT: Code small and local


Service to Service Interaction Authentication, Authorisation and Consent

https://api.chucknorris.com/categories/nerdy

Authenticate API Authorise API Calls Authenticate API


Scaling to Support Distributed Cloud Archs Stateless Architecture

•  Flexible deployment option to address cloud elasticity and massive horizontal scalability

•  Configuration can be on a per-realm basis

•  Stateless = state information is encoded in JWT token

•  Stateful = tokens persisted in the Core Token Service

OpenAM Server

OpenAM Server

OpenAM Server

AWS1 AWS2 AWS3

Microservices Client App

Distributed Cloud Environment


Cloud Readiness


Hybrid Cloud – One Cloud Many Pieces


The Cloud Conundrum

No Portability! Identity Baked in and Constrained to Each Cloud!


OAuth2/OIDC OAuth2/OIDC OAuth2/OIDC OAuth2

The Abstraction of Identity … Again


Cloud Automation


Cloud Native: Cattle versus Pets


Cloud Native: Cattle versus Pets

Cattle •  Cattle are numbers •  They are almost identical •  When ill, get another (Kill it!) •  Thousands of cattle on farm

Pets •  Pets have names like “pussnboots” •  They are lovingly hand raised •  When ill, nursed back to health •  1 or 2 pets in house

Elastic Inelastic


Container Management & Deployment

Product Configuration

Product Manifests

ForgeRock Images

Java Image

Tomcat Image

…

Other Images

DOCKER REPOSITORY


Platform Ubiquity


We Must Be Better

Authen%ca%on Authoriza%on Mul%-‐Factor Adap%ve Risk Self Service Directory API Security GRC …


Unified Platform

UMA Provider Mobile OTP App Synchronization Auditing

LDAPv3 REST/JSON

Replication Access Control

Schema Management

Caching

Auditing

Monitoring

Groups

Password Policy

Active Directory Pass-thru

Reporting

Authentication Authorization Provisioning User Self-Service Authentication OIDC / OAuth2

Federation / SSO User Self-Service Workflow Engine Reconciliation Password Replay SAML2

Adaptive Risk Stateless/Stateful Registration Role Provisioning Message Transformation

API Security Scripting

Built from Open Source Projects:

UMA Resource

Access Management Identity Management Identity Gateway

Directory Services

Com

mon

RES

T AP

I

Com

mon

Use

r Int

erfa

ce

Com

mon

Aud

it/Lo

ggin

g

Com

mon

Scr

iptin

g


Identity Relationship Management: Talkin’ Bout a Revolution

Relationship Management

Cloud Automation

Cloud Readiness

Platform Ubiquity

Microservice Architecture

Contextual Identity


Demo!

Technology

Identity Relationship Management - The Right Approach for a Complex Digital World Webinar