NYC Identity Summit Business Day: "Identity - The Future's So Bright I Gotta Wear Shades!"
Download as PPTX, PDF•0 likes•286 views
ForgeRock discusses evolving from identity management to relationship management. They highlight contextual identity, which enriches user experiences by understanding relationships and context. ForgeRock also discusses microservices architecture, cloud readiness, platform ubiquity, and automating cloud deployments to support modern distributed architectures.
NYC Identity Summit Business Day: "Identity - The Future's So Bright I Gotta Wear Shades!"
- 1. © 2016 ForgeRock. All rights reserved.
- 2. © 2016 ForgeRock. All rights reserved. Relationship Management
- 3. © 2016 ForgeRock. All rights reserved. Identity Users
- 4. © 2016 ForgeRock. All rights reserved. Identity Identity Identity Identity Identity Identity Identity Identity Identity Identity Identity Identity Users, Devices, Things & Services
- 5. © 2016 ForgeRock. All rights reserved. Identity Management Evolves to Relationship Management Identity Lifecycle Management Users, Devices, Things & Services
- 6. © 2016 ForgeRock. All rights reserved. Contextual Identity
- 7. © 2016 ForgeRock. All rights reserved. Contextual Security Taking Safety to the Next Level Passwordless Authentication Register Device for First Time Authorize consent child purchase Authorize family members to use account Authorize Data to Device / Thing
- 8. © 2016 ForgeRock. All rights reserved. Did you just request to transfer $1,000,000. Taro is trying to purchase Footloose on Amazon . Is that ok? Kayoko is requesting access to your car Are you trying to open your front door? We noticed your are accessing our service on a iPhone. Would you like to register this device? Would you like to authorize purchasing Showtime on your Samsung TV? Contextual Identity Enriching the Experience
- 9. © 2016 ForgeRock. All rights reserved. Contextual Identity Authentication, Authorization and Consent User Managed Access Sharing X-Ray with Doctor
- 10. © 2016 ForgeRock. All rights reserved. Microservices Architecture
- 11. © 2016 ForgeRock. All rights reserved. SOA is Dead, but Services on the Rise! 1990s and Early Pre-SOA Monolith to change 2000s Traditional SOA Autonomous but coordinated Present Microservices Decoupled and Independent PWC, Agile coding in enterprise IT: Code small and local
- 12. © 2016 ForgeRock. All rights reserved. Service to Service Interaction Authentication, Authorization and Consent https://api.telstra.com/v1/mobileconnect/userinfo Authenticate API Authorize API Calls Authenticate API
- 13. © 2016 ForgeRock. All rights reserved. Scaling to Support Distributed Cloud Archs Stateless Architecture • Flexible deployment option to address cloud elasticity and massive horizontal scalability • Configuration can be on a per- realm basis • Stateless = state information is encoded in JWT token • Stateful = tokens persisted in the Core Token Service OpenAM Server OpenAM Server OpenAM Server AWS1 AWS2 AWS3 Microservices Client App Distributed Cloud Environment
- 14. © 2016 ForgeRock. All rights reserved. Cloud Readiness
- 15. © 2016 ForgeRock. All rights reserved. Hybrid Cloud – One Cloud Many Pieces
- 16. © 2016 ForgeRock. All rights reserved. The Cloud Conundrum No Portability! Identity Baked in and Constrained to Each Cloud!
- 17. © 2016 ForgeRock. All rights reserved. OAuth2/OIDC OAuth2/OIDC OAuth2/OID C OAuth2 The Abstraction of Identity … Again
- 18. © 2016 ForgeRock. All rights reserved. Cloud Automation
- 19. © 2016 ForgeRock. All rights reserved. Cloud Native: Cattle versus Pets
- 20. © 2016 ForgeRock. All rights reserved. Cloud Native: Cattle versus Pets Cattle • Cattle are numbers • They are almost identical • When ill, get another (Kill it!) • Thousands of cattle on farm Pets • Pets have names like “pussnboots” • They are lovingly hand raised • When ill, nursed back to health • 1 or 2 pets in house Elastic Inelastic
- 21. © 2016 ForgeRock. All rights reserved. Container Management & Deployment Product Configuration Product Manifests ForgeRock Images Java Image Tomcat Image … Other Images DOCKER REPOSITORY
- 22. © 2016 ForgeRock. All rights reserved. Platform Ubiquity
- 23. © 2016 ForgeRock. All rights reserved. We Must Be Better Authentication Authorization Multi-Factor Adaptive Risk Self Service Directory API Security GRC …
- 24. © 2016 ForgeRock. All rights reserved. Unified Platform UMA Provider Mobile OTP App Synchronization Auditing LDAPv3 REST/JSON Replication Access Control Schema Management Caching Auditing Monitoring Groups Password Policy Active Directory Pass-thru Reporting Authentication Authorization Provisioning User Self-Service Authentication OIDC / OAuth2 Federation / SSO User Self-Service Workflow Engine Reconciliation Password Replay SAML2 Adaptive Risk Stateless/Stateful Registration Role Provisioning Message Transformation API Security Scripting Built from Open Source Projects: UMA Resource Access Management Identity Management Identity Gateway Directory Services CommonRESTAPI CommonUserInterface CommonAudit/Logging CommonScripting
- 25. © 2016 ForgeRock. All rights reserved. Identity Relationship Management: Talkin’ Bout a Revolution Relationship Management Cloud Automation Cloud Readiness Platform Ubiquity Microservices Architecture Contextual Identity
- 26. © 2016 ForgeRock. All rights reserved. Demo!