Identity Gateway with the ForgeRock Identity Platform - So What’s New? Devices, and Things: Better Than a Fish in Your Ear In the Hitchhiker’s Guide to the Galaxy they have a handy little thing called a Babel Fish. Put it in your ear and you can instantly communicate with anything, anywhere in the galaxy. It’s quick and painless and works great. And that’s exactly how the ForgeRock Identity Gateway works too. It’s a simple, standards-based approach to extend access to web applications, application programming interfaces (APIs), and devices and things. The ForgeRock Identity Gateway, provides a flexible policy enforcement point to support your current environment while migrating towards a modern, standards-based platform. So you can connect digital assets across your ecosystem, with minimal-to-no changes. And no slimy little fish required! Highlights: - Intro to the ForgeRock Identity Platform - New features available in this release - Maintaining existing infrastructure through password replay - Gateway and a Mobile device walk into a bar…. - Federating services - Mobilizing those apps Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

1. © 2016 ForgeRock. All rights reserved.
Identity Gateway with the ForgeRock
Identity Platform - So What’s New?
• Ludovic Poitou – Product Manager
• Rob MacDonald, Product Marketing Director

2. © 2016 ForgeRock. All rights reserved.
ForgeRock: At a Glance
• Fastest-growing open source identity security
software company in the world
• Founded: 2010
• Headquartered in San Francisco with offices
in 6 countries
• Employees: 350+
• Customers: 400+ Enterprises in 30+ countries
• Global Reach: ~50% international revenue
• Funding to Date (thru Series C): $52M
• Investors: Accel Partners, Foundation Capital
and Meritech Capital Partners
Key Facts Mission Statement
The forgerock identity
platform currently powers
more than 500 million
identities. It is our goal to
become the market leader
in digital transformation
and security for enterprise
identity worldwide.

3. © 2016 ForgeRock. All rights reserved.
Perimeter-Based Security Identity-Centric Security
Enables Digital Business
Untrusted
Trusted
Inhibits Digital Business
Old Security Model is Broken. Security Must Now Be
Identity-Based.
Enables Digital BusinessInhibits Digital Business

4. © 2016 ForgeRock. All rights reserved.
Changes are adding Complexity
Employees
Employees &
Partners
Perimeter
Perimeter
Federation
Things
Perimeter-less
Federation
Cloud
SaaS
Mobility
Consumers
Perimeter-less
Federation
Cloud / SaaS
ComplexityofScale
Complexity of Experience

5. © 2016 ForgeRock. All rights reserved.
Identity Access Management
Customers
(millions)
On-premises
People
Applications
and data
PCs
Endpoints
Workforce
(thousands)
Partners and
Suppliers
Customers
(millions)
On-premises Public
Cloud
Private
Cloud
People
Things
(Tens of
millions)
Applications
and data
PCs PhonesTablets
Smart
Watches
Endpoints
Forrester Report Nov 2015: Market Overview: Customer Identity And Access Management (CIAM) Solutions
Identity Relationship Management
Business Has Changed: Enterprises Now Require
Identity Relationship Management (IRM)
Business Has Changed: Enterprises Now Require
Identity Relationship Management (IRM)

6. © 2016 ForgeRock. All rights reserved.
Enterprise AppsMobile Apps Things Cloud
Single Architecture | Next Generation | Open | Chip-to-Cloud Deployments | IRM
Identity ManagementAccess Management Directory Services Identity Gateway
Platform Strategy

7. © 2016 ForgeRock. All rights reserved.
Shared Services : User Interface, Self-Service, REST API, HTTP, Scripting, Audit and
Logging
Federation Synchronization
Authentication & Strong
Authentication
Identity Provisioning Application & Service
Gateway
Authorization &
UMA Provider
Workflow Engine IoT Identity Gateway
Adaptive Risk Self-Service Password Capture & Replay
UMA Protector
Access Management Identity Management Identity Gateway
Data Store
High Availability
Data Segmentation
LDAP / REST
Directory Services
Open Standards, High Availability, On-Premises, Cloud, Hybrid
The ForgeRock Identity Platform is built from the open source projects OpenAM, OpenIDM, OpenIG and OpenDJ
The ForgeRock Identity Platform

8. © 2016 ForgeRock. All rights reserved.
Throttling
Message Transformation Monitoring
Session Management Token Exchange
SSO
Scripting
Relying Party
Authentication
Authorization Federation (SAML / OIDC)
Password Capture &
Replay
Protected Resources Identity Providers Data Stores
Web Applications
APIs
Services Layer
Access Layer HTTP / HTTPS OAuth2.0 | OpenID Connect | SAMLv2
External Layer
Databases
Directories
Files
Audit
ForgeRock Identity Platform: Identity Gateway

9. © 2016 ForgeRock. All rights reserved.
Accelerate your Digital Transformation
• APIs are the secret sauce to
becoming digital
• Enable the level of business
agility and interconnectedness.
• Identity is core to business and
security
9

10. © 2016 ForgeRock. All rights reserved.
Why a Gateway?
• Mobile First Strategy
• Protect APIs
• From Mobile to Enterprise Federation
• Micro-Services Architecture
• Route to and Protect APIs
• Bridging to IoT
• Security
• Extend to Legacy
10

11. © 2016 ForgeRock. All rights reserved.
ForgeRock Identity Gateway
• A Gateway with many facets:
• Identity
• API
• Mobile
• Security
• …

12. © 2016 ForgeRock. All rights reserved.
Identity Gateway
• Improved support for OpenID Connect
• Discovery
• Registration
• Centralized Authorization Policy
with OpenAM
• Simplified Password Replay

13. © 2016 ForgeRock. All rights reserved.
ForgeRock identity Gateway
as API Gateway
• Throttling
• Global
• Per protected API or Application
• Monitoring
• Status
• Throughput and Response Times statistics
• Auditing

14. © 2016 ForgeRock. All rights reserved.
Other Improvements
• Security
• Control of TLS protocols and
cipher suites
• Mobile Gateway
• Token exchange from
OAuth2 to SAMLv2
• Better scalability and performances
• Improved ease of configuration

15. © 2016 ForgeRock. All rights reserved.
Demo
15

16. © 2016 ForgeRock. All rights reserved.
Discovery and Client Registration…
Identity Gateway
Application
ForgeRock
Access Management
?

17. © 2016 ForgeRock. All rights reserved.
API Protection
Identity Gateway
APIs
ForgeRock
Access Management
Throttling
Authorization

18. © 2016 ForgeRock. All rights reserved.
Q&A
18

19. © 2016 ForgeRock. All rights reserved.
Thank You!
19