Con8834 bring your own identity - final

1

Copyright © 2012, Oracle and/or its affiliates. All rights reserved.

Insert Information Protection Policy Classification from Slide 12

Attract New Customers and
Users by Leveraging Bring
Your Own Identity (BYOI)
Forest Yin – Product Management, Oracle
Vikas Mahajan – Director, AARP
Arnaud Robert – CTO, BeachBody

Safe Harbor Statement
The following is intended to outline our general product
direction. It is intended for information purposes only, and
may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality,
and should not be relied upon in making purchasing
decisions. The development, release, and timing of any
features or functionality described for Oracle’s products
remains at the sole discretion of Oracle.

3



Program Agenda
 Introduction to Bring Your Own Identity (BYOI)
 Oracle Solution

 Customer Case Studies
– AARP
– BeachBody

4



Subscription-based
Content Services
Online
Healthcare

Citizen
Services
Business
Transformation

Mobile
Banking
5


Manufacturing
Services

MOST SIGNIFICANT
RE-ARCHITECTURE
IN 20 YEARS

Social
Retail

Cloud
Services

Mobile
Workforce

Social
CRM


What’s Business Transformation?

Mobile
 BYOD complicates

privacy
 Enterprise and

personal data
 Poor device, app and

data security

Cloud
 On premise, private,

Social
 Users want to use

public apps
 Identity for SaaS apps

social ID
 Simplify registration

and marketing

 Cloud-based access

portals
 Fragments identity

 Trust is difficult
 OAuth & OpenID

 Unified approach iOS,

leading to other IdPs

Android, ?

Identity is core across these
transformations
6



Trend – Social Identity Transforming Business
Social Commerce
– FaceBook 1+ billion users

– Preferences and interests
– Friends and relationships

Social Workplace
– Social while working
– Working while social

7



Trend – Social Identity Transforming Business

SOCIAL MEDIA MERGES
WORK & PLAY

44%

Plan to social enable
applications in the near
future
Source: Enterprise strategy group 2012

82%
8



Of the world reached by
social media sites
ComScore Datamine Jan 2012

Trend – Federated Identity Enabling Cloud
Service providers rely on existing IdP
Partners leverage existing enterprise
identity

9



Why BYOI?
Better user experience
More effective marketing
Lower TCO

10



Challenges of BYOI
How to enable it for your business?
Is it secure enough?
What if you need higher level of trust

and security?

11



Introducing Oracle Access Management
Reference Architecture

• Complete
• Modernized

• Simplified
• Innovative
• Scalable

12



Oracle Access Management 11gR2
Simplified and Innovative
 Converged Services
– Authentication and SSO
– Federated SSO
– Mobile & Social
– Security Token Service

 Innovation
– Mobile Security
– Social Identity
– REST Services
– Identity Context

13



Oracle Access Management Social Identity
Social Sign On
Select

14


Login


Authorize

For Mobile Authentication

15



Overview
Enable applications to consume
Social Identities
Enable customers to federate with
social networking sites
Support standard protocols like
OAUTH and OpenID

Add Social Identity Personalization
and Federation Options to Mobile
Applications, Websites, and
resources protected by
Oracle Access Manager and Oracle
Entitlements Server

Easily add to existing OAM sites

16



When You Need Higher Level of Trust
 Will you let a customer using FaceBook identity for
– Online banking transactions?
– Buying products from your online stores?
– Accessing company intellectual properties (IP)
 Higher risk transactions demand higher level of trust and

security

17



Securely Enable BYOI for Your Business
 Require an intelligent access platform that understands

context and risk
– Identity context, device context, resource context, transaction context, etc
– Weighted risk based on real-time context

 Take actions based on context and risk

18



Step Up Trust and Security
 Linking BYOI to local accounts
– A simple step for user to link social identity with existing local

account
– Only required initially
 Register for new local account
– Simplified registration process
– Pre-populated profile info for registration

19



Oracle Access Management
Access Intelligence
If the risk is very high:
Deny access and alert the
security team

HIGH

If the risk is high:
KBA or OTP

RISK

MEDHIGH

If the risk is medium:
Local account/ SAML
Federated accounts

MEDLOW
If the risk is low:
Social Identity

LOW

RESPONSE
DENY

ALLOW

20



Federated Identity – Identity Provider B2B
Partner Resource
Service Provider

Oracle Identity Federation Identity Provider and Service Provider

Protected
Resources

21

Copyright © 2013, Oracle and/or its affiliates. All right


Oracle Access
Management

Federated identity – Identity Provider SaaS
Partner Resource
Service Provider

Oracle Identity Federation Identity Provider and Service Provider

Protected
Resources

22

Copyright © 2013, Oracle and/or its affiliates. All right


Oracle Access
Management

Oracle Access Management Identity Federation
•

Converged services
•

•

•

Session Attributes support
•SAML

Protocol Support
•

SAML 2.0, SAML 1.1, OpenID 2.0
and WSFed

•

attributes in authorization policy

•Attribute

mapping

IdP/SP – initiated SSO, Logout
Identity Provider
Establish
Identity

Maintain
session

23

attributes in response headers

•SAML

Admin, server and data


Filter
attributes

Assert
Identity


Service Provider
Map
Attributes

Link
Identities

Pass Identity
Attributes to Apps

Oracle Access Management
Summary
 Enables business to leverage BYOI
– Social and federated identity

 Enhances security & improves user experience
– Intelligent flexible trust model

 Lowers Total Cost of Ownership (TCO)
– Complete, simplified and scalable solution
24



Customer Case Studies

25



Helping People
Get More Out of Life
26



The Business Needs
 Employees
 Enable BYOD
 Support Cloud/SaaS/Mobile

 Social Mission & Volunteers
 Empower Them with Tools & Technology
 Collaborate

 Adapt Quickly to Changing Needs

27



The Technology Issues
 The Technology Issues
 Defense-In-Depth
 Trust
 Scalability
 Cost & Manageability

 And Don’t Forget…
 Applications (are they mobile/social ready?)

28



Conceptual Access Mgmt Architecture

29



“help people achieve their goals and
enjoy a healthy, fulfilling life”.

30



multi-products
fitness

31


nutrition


beauty

multi-channel

infomercial

32

online &
mobile



MLM

certification

multi-profiles

consumers

customers
of coaches

coaches

trainers
33



club
members

Don’t miss these IDM Sessions
CON8817

Tuesday 09/24,
5:15PM

Moscone West,
Room 2018

API Management: Enable Your Infrastructure for
Secure Mobile and Cloud Use

Ganesh Kirti, Oracle

CON8823

Wednesday 09/25,
5:00PM

Moscone West,
Room 2018

Access Management for the Internet of Things

Kanishk Mahajan, Oracle

CON8902

Thursday, 09/26
2:00PM

Marriot Marquis – Developing Secure Mobile Applications
Golden Gate C3

CON8837

Wednesday 09/25,
11:45AM

Moscone West,
Room 2018

Leverage Authorization to Monetize Content and
Media Subscriptions

Roger Wigenstam, Oracle

CON9024

Thursday 09/26,
2:00PM

Moscone West,
Room 2018

Next Generation Optimized Directory - Oracle
Unified Directory

Etienne Remillon, Oracle

34



Mark Wilcox, Oracle

Oracle Fusion Middleware
Business Innovation Platform for the Enterprise and Cloud
 Complete and Integrated
Web

Social

Mobile

 Best-in-class

User Engagement
Business
Process
Management

 Open standards
Content
Management

Service Integration

Business
Intelligence

Data Integration

Identity Management
Development
Tools

35

Cloud Application
Foundation


Enterprise
Management


 On-premise and Cloud
 Foundation for Oracle Fusion
Applications and Oracle Cloud

36



37



Con8834 bring your own identity - final

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (20)

Ähnlich wie Con8834 bring your own identity - final

Ähnlich wie Con8834 bring your own identity - final (20)

Mehr von OracleIDM

Mehr von OracleIDM (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Con8834 bring your own identity - final

Hinweis der Redaktion