The demands of digital business are driving the the need for a different type of identity platform. One architected for not only securing the online experience, but also to enrich it. In this session we will outline a different way of architecting identity and the new requirements an identity platform must address including contextual identity, customer data management, micro-services, privacy and consent, and the IoT. This session will also provide an update on the ForgeRock platform and our vision for the future.

1. © 2016 ForgeRock. All rights reserved.
Identity: The Future's So
Bright, I Gotta Wear Shades
Daniel Raskin, SVP Product Management
Paris Identity Summit

2. © 2016 ForgeRock. All rights reserved.
Relationship
Management

3. © 2016 ForgeRock. All rights reserved.
Identity
Users

4. © 2016 ForgeRock. All rights reserved.
Identity
Identity
Identity
Identity
Identity
Identity
Identity
Identity
Identity
Identity
Identity
Identity
Users, Devices, Things & Services

5. © 2016 ForgeRock. All rights reserved.
Identity Management Evolves to Relationship Management
Identity Lifecycle Management
Users, Devices, Things & Services

6. © 2016 ForgeRock. All rights reserved.
Contextual
Identity

7. © 2016 ForgeRock. All rights reserved.
Contextual Security
Taking Safety to the Next Level
Passwordless
Authentication
Register Device
for First Time
Authorise consent
child purchase
Authorise family members
to use account
Authorise Data to
Device / Thing

8. © 2016 ForgeRock. All rights reserved.
Did you just request to transfer
$1,000,000.
Taro is trying to purchase
Footloose on Amazon .
Is that ok?
Kayoko is requesting access to
your car
Are you trying to open your front
door?
We noticed your are accessing
our service on an iPhone. Would
you like to register this device?
Would you like to authorise
purchasing Showtime on your
Samsung TV?
Contextual Identity
Enriching the Experience

9. © 2016 ForgeRock. All rights reserved.
Contextual Identity
Authentication, Authorisation and Consent
User Managed Access
Sharing X-Ray with Doctor

10. © 2016 ForgeRock. All rights reserved.
Microservices
Architecture

11. © 2016 ForgeRock. All rights reserved.
SOA is Dead, but Services on the Rise!
1990s and Early
Pre-SOA
Monolith to change
2000s
Traditional SOA
Autonomous but coordinated
Present
Microservices
Decoupled and Independent
PWC, Agile coding in enterprise IT: Code small and local

12. © 2016 ForgeRock. All rights reserved.
1990s and Early
Pre-SOA
Monolith to change
2000s
Traditional SOA
Autonomous but coordinated
Present
Microservices
Decoupled and Independent
PWC, Agile coding in enterprise IT: Code small and local
SOA is Dead, but Services on the Rise!

13. © 2016 ForgeRock. All rights reserved.
Service to Service Interaction
Authentication, Authorisation and Consent
https://api.telstra.com/v1/mobileconnect/userinfo
Authenticate API Authorise API Calls Authenticate API

14. © 2016 ForgeRock. All rights reserved.
Scaling to Support Distributed Cloud Archs
Stateless Architecture
• Flexible deployment option to
address cloud elasticity and
massive horizontal scalability
• Configuration can be on a per-realm
basis
• Stateless = state information is
encoded in JWT token
• Stateful = tokens persisted in the
Core Token Service
OpenAM
Server
OpenAM
Server
OpenAM
Server
AWS1 AWS2 AWS3
Microservices
Client App
Distributed Cloud Environment

15. © 2016 ForgeRock. All rights reserved.
Cloud
Readiness

16. © 2016 ForgeRock. All rights reserved.
Hybrid Cloud – One Cloud Many Pieces

17. © 2016 ForgeRock. All rights reserved.
The Cloud Conundrum
No Portability! Identity Baked in and Constrained to Each Cloud!

18. © 2016 ForgeRock. All rights reserved.
OAuth2/OIDC OAuth2/OIDC OAuth2/OIDC OAuth2
The Abstraction of Identity … Again

19. © 2016 ForgeRock. All rights reserved.
Cloud
Automation

20. © 2016 ForgeRock. All rights reserved.
Cloud Native: Cattle versus Pets

21. © 2016 ForgeRock. All rights reserved.
Cloud Native: Cattle versus Pets
Cattle
• Cattle are numbers
• They are almost identical
• When ill, get another (Kill it!)
• Thousands of cattle on farm
Pets
• Pets have names like “pussnboots”
• They are lovingly hand raised
• When ill, nursed back to health
• 1 or 2 pets in house
Elastic Inelastic

22. © 2016 ForgeRock. All rights reserved.
Container Management & Deployment
Product
Configuration
Product
Manifests
ForgeRock
Images
Java
Image
Tomcat
Image
…
Other
Images
DOCKER REPOSITORY

23. © 2016 ForgeRock. All rights reserved.
Platform
Ubiquity

24. © 2016 ForgeRock. All rights reserved.
We Must Be Better
Authentication Authorization Multi-Factor Adaptive Risk Self Service Directory API Security GRC …

25. © 2016 ForgeRock. All rights reserved.
Unified Platform
UMA Provider Mobile OTP App Synchronization Auditing
LDAPv3 REST/JSON
Replication Access Control
Schema
Management
Caching
Auditing
Monitoring
Groups
Password Policy
Active
Directory Pass-thru
Reporting
Authentication Authorization Provisioning User Self-Service Authentication OIDC / OAuth2
Federation / SSO User Self-Service Workflow Engine Reconciliation Password Replay SAML2
Adaptive Risk Stateless/Stateful Registration Role Provisioning
Message
Transformation
API Security Scripting
Built from Open Source Projects:
UMA Resource
Access Management Identity Management Identity Gateway
Directory Services
CommonRESTAPI
CommonUserInterface
CommonAudit/Logging
CommonScripting

26. © 2016 ForgeRock. All rights reserved.
Identity Relationship Management: Talkin’ Bout a Revolution
Relationship
Management
Cloud
Automation
Cloud
Readiness
Platform
Ubiquity
Microservices
Architecture
Contextual
Identity

27. © 2016 ForgeRock. All rights reserved.
Demo!