With an increasing number of microservices, the complexity of adding security and identity capabilities to each of them can quickly get out of hand. By externalizing and centralizing IAM, organizations can ensure a secure and consistent IAM across on-premises and cloud infrastructures, as well as promote DevOps best practices.

1. © 2017 ForgeRock. All rights reserved.

2. © 2017 ForgeRock. All rights reserved.
Joachim Andres
Director, Product Management
Authentication & Authorization
for the Microservices World
KuppingerCole Webinar, Dec 5th
, 2017

3. © 2017 ForgeRock. All rights reserved.
HTTP(S) / MQTT / COAP / MQTTHTTP(S)
User Identities
Device Identities
Thing Identities
User Identities
Device Identities
Thing Identities
User Identities
Device Identities
Thing Identities
Region 1 Region 2 Region 3
Data Replication
High Availability
Data Replication
High Availability
DIRECTORY SERVICES
Agent / Proxy / Standards / REST Edge Controller / Message Broker
REST / LDAP
ForgeRock: Driving Relationships Across People, Services, Things
Partner Run Customer Run
Privacy First
Offers modern privacy and
consent tools including a Profile
and Privacy Management
dashboard, UMA 2.0 support for
compliance with GDPR, PSD2,
Open Banking, etc
Identity Intelligence
Platform that enables
relationships, access, policy,
lifecycle across users, devices
and things
Persistent Identity
Eliminate digital silos and
create unified experience –
people, services, things
Run Anywhere
Run across multiple
landscapes
Massive Scale
Highly-performant, highly
available, database for
managing millions of
relationships
ACCESS MANAGEMENT
Fine-grained, adaptive authentication, etc
IDENTITY MANAGEMENT
Profile & privacy management, relationships, etc

4. © 2017 ForgeRock. All rights reserved.
The Microservices World

5. © 2017 ForgeRock. All rights reserved.
Authentication vs. Authorization
MS1MS0 MS3MS2
MS6
MS4 MS5
Service
Authentication Authorization
AuthN
AuthZ
AuthN / AuthZ
Provider
People
(and devices)
Services
and Things

6. © 2017 ForgeRock. All rights reserved.
Characteristics
of a sound security strategy

7. © 2017 ForgeRock. All rights reserved.
Simplicity

8. © 2017 ForgeRock. All rights reserved.
Consistency

9. © 2017 ForgeRock. All rights reserved.
Modernizing

10. © 2017 ForgeRock. All rights reserved.
Adaptable

11. © 2017 ForgeRock. All rights reserved.
Simplicity Consistency
Modernizing Adaptable

12. © 2017 ForgeRock. All rights reserved.
Bringing security to life

13. © 2017 ForgeRock. All rights reserved.
Microservices Gateway
MS1MS0 MS3MS2
MS6MS5 MS8MS7
Microservices Gateway
ForgeRock Identity Gateway
MS4
Authentication and
Authorization Service
ForgeRock Access Management
Caller
• Token Issuance
• Token Validation
• Token Exchange
• Enforce token validity
• Caching
• Signature Validation

14. © 2017 ForgeRock. All rights reserved.
Microservices Segmentation
MS1MS0
MS3
MS2
MS6MS5
MS8MS7
Microservices Gateway
ForgeRock Identity Gateway
MS4
Caller
Authentication and
Authorization Service
ForgeRock Access Management
• Token Issuance
• Token Validation
• Token Exchange
• Enforce token validity
• Caching
• Signature Validation
• All gateways point to AM
Microservices Gateway
ForgeRock Identity Gateway

15. © 2017 ForgeRock. All rights reserved.
µGateway
ForgeRock IG
µGateway
ForgeRock IG
Microgateways
MS1MS0
Caller
µGateway
ForgeRock IG
µGateway
ForgeRock IG
MS3MS2
µGateway
ForgeRock IG
MS4
µGateway
ForgeRock IG
µGateway
ForgeRock IG
MS6MS5
µGateway
ForgeRock IG
µGateway
ForgeRock IG
MS8MS7
Authentication and
Authorization Service
ForgeRock Access Management
• Token Issuance
• Token Validation
• Token Exchange
• Enforce token validity
• Caching
• Signature Validation
• All gateways point to AM

16. © 2017 ForgeRock. All rights reserved.
Microservices in PaaS environments
Client
Load
Balancer
ForgeRock
Access Management
ForgeRock
Identity Gateway
ForgeRock
Service Broker
IDENTITY PLATFORM
CF Route Service
MS1MS0
MS2
MS3
CF
Router
1
2
36
4
5
7
8

17. © 2017 ForgeRock. All rights reserved.
Benefits of Externalizing Security
Think globally, act locally
Download the ForgeRock Identity Platform white paper at www.forgerock.com/platform/
Got questions? Contact us at www.forgerock.com/contact/
Execute a sound
security strategy
Leverage a solution that’s simple,
consistent, modernizing, and
adaptable.
Support DevOps and
innovation
Deploy authentication and
authorization where you need it,
when you need it.
Holistic approach with
persistent identity
Integrate identity across apps
and services for increased security
and scale.

18. © 2017 ForgeRock. All rights reserved.
Thank You