A Breakout Session on Atomic Architecture presented by ForgeRock team members Jamie Nelson, VP Engineering, Jonathan Scudder, OpenAM Lead Architect & Co-founder, and Jake Feasel, Sr. Software Developer. At the 2014 IRM Summit in Phoenix, Arizona.

1. IRM Summit 2014
Incredible Edible Identity
Jamie Nelson
Jonathan Scudder
Jake Feasel

2. 2IRM Summit 2014
Evolution To IRM
Employees
Consumers
Employees &
Partners
Things
Perimeter
Perimeter
Federation
Perimeter-less
Federation
Cloud / SaaS
Perimeter-less
Federation
Cloud
SaaS
Mobility
Attributes
Context
Stateless
Relationships

3. 3IRM Summit 2014
ForgeRock Products
Context-Based Access
Management
Cloud-Focused
Identity Administration
Internet Scale
Directory Services
Unifying Enterprise and Cloud
Identity Infrastructure
No Touch SSO to enterprise,
legacy, and custom apps
Hands-free protection of
mobile apps and APIs
Identity Relationship Management Platform
Only Unified Platform – Only Customer-Scale Platform -- Supports any application, device,
or “thing”
FORGEROCK.COM | CONFIDENTIAL
SecureMobileSecureConnectCloudConnect

4. 4IRM Summit 2014
ForgeRock Deployment
Portals,applications,webservices,API’s
• Registration & Self-Service
• Auditing & Compliance
• Workflow & Reporting
• Native connectors
• REST API
• Authentication & session
• Authorization & policy
• Entitlements
• Federation
• REST API
• Identity Store
• Directory Proxy
• REST API
Partners
• Reverse Proxy
• App Gateway Legacy Apps
ICF
• Identity
Connector
Framework
Identity
Administration
Access
ManagementIdentityData
• Provisioning
• SSO
Cloud Apps
Consumers & Customers
Enterprise Apps
Devices & Things
• Federation
Data Centers
• HA
• Replication
CloudCONNECT
SecureConnect

5. 5IRM Summit 2014
Niche Vendor
Access
Management
Provisioning
Services
Directory
Services
SaaS Bridging Application
Gateway
Mobile
Enablement
Great At One Problem Space
Pick One
FORGEROCK.COM | CONFIDENTIAL

6. 6IRM Summit 2014
Niche Deployment
Portals,applications,webservices,API’s
• Registration & Self-Service
• Auditing & Compliance
• Workflow & Reporting
• Native connectors
• REST API
• Authentication & session
• Authorization & policy
• Entitlements
• Federation
• REST API
• Identity Store
• Directory Proxy
• REST API
Partners
• Reverse Proxy
• App Gateway Legacy Apps
• Identity
Connector
Framework
Identity
Administration
Access
ManagementIdentityData
• Provisioning
• SSO
Cloud Apps
Consumers & Customers
Enterprise Apps
Devices & Things
• Federation
Data Centers
• HA
• Replication

7. 7IRM Summit 2014
Leading Stack Vendors
Acquisition Architecture – Employee Scale – Massive TCO
Access
Manager
Identity
Federation
Identity
Manager
Mobile Security
Suite
Directory
Server
Entitlements
Server
Enterprise
SSO
Identity
Governance
Adaptive
Access
Web Services
Security
Enterprise AppsMobile Apps Things

8. 8IRM Summit 2014
Stack Vendor’s Deployment
Portals,applications,webservices,API’s
Professional
Services
Partners
Legacy Apps
Identity
Administration
Access
ManagementIdentityData
Cloud Apps
Consumers & Customers
Enterprise Apps
Devices & Things
Data Centers

9. 9IRM Summit 2014
Integrated Stack Components
■ Simple, Integrated, Modular, High Scale
■ ForgeRock REST (CREST)
■ Authn and Authz Filters
■ ForgeRock UI
■ OpenID Connect, OAuth, SAML2

10. 10IRM Summit 2014
OpenAM
ForgeRock REST (Commons REST)
Protected Resources
Web
Agents
JavaEE
Agents
Web Services
Agents
User Interface
End User
ForgeRock UI Framework
Core Services
Authentication Entitlements Session AuditOAuth
Core Token ServiceOpenID
Connect
Configuration
Policy
User
Management
Secure Token
Service
XACML Federation
SPIs
Authentication
Plugins
Policy
Plugins
User Mgmt
Plugins
Token
Service
Plugins
Federation
Plugins
Persistence
(OpenDJ)
Universal
Gateway
Management

11. 11IRM Summit 2014
OpenIDM
OSGI
Persistence
(OrientDB)
ForgeRock UI Framework
ForgeRock REST Router
Business Logic (Javascript, Groovy, Java)
Authentication Filter (JASPI)
Jetty Web Server
Configuration
Managed
Users
Sync/Recon
System
(Connectors)
Scheduler
Task
Scanner
Audit/Logs
Policy
ExternalResources
Audit

12. 12IRM Summit 2014
OpenDJ
User Interface
End UserManagement
ForgeRock UI Framework
ForgeRock REST
Core Server
Replication AuditingLDAPV3Caching Monitoring
Password
Policy
Groups
Schema
Management
REST2LDAP
Access
Control
Backend Services
Persistence Connectors LDIF MemoryChange Log
Java SDK/ LDAPv3
Web Application
REST2LDAP
ForgeRock REST

13. 13IRM Summit 2014
CloudConnect
OSGIConfiguration Wizard
OpenIDM
Business Logic (Javascript, Groovy, Java)
Authentication JASPI (AD and IWA)
Jetty Web Server
Salesforce
and LDAP
OAuth
Salesforce
LDAP
Connector
Federation
ForgeRock UI Framework
Reporting and Recon

14. 14IRM Summit 2014
SecureConnect
Core Processing
Http Connector
HTTP Listener
ChainsFilters Functions Handlers
Scripting Audit

15. 15IRM Summit 2014
API Strategy
Conscious, proactive design
Developer-focused Consistent
Easy to useModern

16. 16IRM Summit 2014
API Strategy
Conscious, proactive design
Developer-focused Consistent
Easy to useModern
JSON
REST
ROA

17. 17IRM Summit 2014
API Strategy
OpenIDM
Resource API
OpenAM
Resource API
OpenDJ
Resource API
Common UI / other clients
Resource consumer

18. 18IRM Summit 2014
CREST API

19. 19IRM Summit 2014
CREST Framework
COPYRIGHT 2013 FORGEROCK AS
ROA Framework / CREST API
Router
Services or other
non-resource
oriented architecture
Resource
Normalization
Non-Json
Resource
JsonResource

20. 20IRM Summit 2014
AuthN and AuthZ Filters

21. 21IRM Summit 2014
Open Identity Stack UI Model
■ “Single-Page Web App” style
■ Single UI model for all products
■ Built on ForgeRock REST (CREST)
■ Common UIs for:
– User management
– Registration and Self Service
– Login and Password Reset
■ Build on shared services for Authentication

22. 22IRM Summit 2014
ForgeRock UI Library Stack
 jQuery (General utlity) + jQuery UI (Widgets)
 Backbone.js + Require.js (Modular MVC Architecture)
 Handlebars.js (Templating)
 Underscore.js (General utility)
 Less.js (CSS preprocessor)
 Built on ForgeRock REST and Common Services
 Caters to the web developers of today

23. 23IRM Summit 2014
Demo
■ OpenAM as the IDP
■ OpenDJ as the User and Config Store
■ OpenIDM provisioning to DJ
■ Commons
– ForgeRock REST in OpenAM, OpenIDM, OpenDJ
– Filters protecting OpenIDM
– ForgeRock UI in OpenIDM and OpenAM

24. 24IRM Summit 2014
Questions ?