Pimping the ForgeRock Identity Platform for a Billion Users

•

0 gefällt mir•226 views

ForgeRock

ForgeRock Tech Cafe, Dusseldorf, May 2017

Technologie

© 2017 ForgeRock. All rights reserved.
Pimp the ForgeRock Platform to 1B Users
Ludovic Poitou – Director Product Management

© 2017 ForgeRock. All rights reserved.
1 Billion Users
• User Profiles
• User Sessions
• User Devices
• # of Concurrent Access
• # of Transactions
• Getting started with 1B
Identities

© 2017 ForgeRock. All rights reserved.
ForgeRock Directory Services
• Specialized database
• Based on LDAP protocol and Data Model
• Centralized, Secure, Highly Available, High Throughput, Low Latency
• Used by all products: Identity Store, Configuration Store,
Session Store, Managed Object Store (next version)
• Very good vertical scalability
• Benchmark with 500M Users
• QA tests for Sanity with 3B Users. 1 week.

© 2017 ForgeRock. All rights reserved.
The Evolution of Databases
• Characteristics of the NoSQL databases
• Distributed on Commodity Hardware
• Elastic Scaling
• Key Value Pairs & Unstructured data
• Really designed for ever growing data and real time analysis (Time
Series)
• Ease of Use through Automation and Orchestration
• BUT:
• No ACID
• Limited Indexing
• No Standard

© 2017 ForgeRock. All rights reserved.
Some Principles of NoSQL

© 2017 ForgeRock. All rights reserved.
Directory Proxy Server
Distributed Identity Architecture
The proxy provides …
• A single point of access with choice
of using REST or LDAP to access
underlying LDAP database services.
• High service availability, hiding
implementation details from LDAP
client applications.
• LDAP load balancing and failover
strategies to handle referrals,
connection failures, and network
partitions.
• Can be deployed with any LDAPv3
identity store.
LDAP or REST
Tenant 1
Proxy Service
Tenant 2 Tenant 3 Tenant 4
LDAP

© 2017 ForgeRock. All rights reserved.
DIRECTORY SERVICE
What’s Next?
• Cloud Native
• Registration, Discovery and
Automation
• Horizontal Scalability
• Simplification, Optimization of
Replication
• Data Sharding
Data Store Data Store Data Store
Data Store Data Store Data Store
Data
Access
Data Store
Data Store
Data
Access
Data
Access
Client AppClient App Client App

© 2017 ForgeRock. All rights reserved.
Access Management
• Autonomous Servers
• Cloud Native
• Session Store Scalability and Performances
• => Horizontal and Elastic Scalability

© 2017 ForgeRock. All rights reserved.
Identity Management
• Cloud Native
• Leveraging Directory Services as the Internal Repository

© 2017 ForgeRock. All rights reserved.
Identity Gateway
• Immutable Configuration
• Cloud Native
• Performances

© 2017 ForgeRock. All rights reserved.
Thank You

Empfohlen

Identity Live Sydney 2017 - Ian SorbelloForgeRock

ForgeRock Platform Release - Summer 2016 ForgeRock

HSBC - ForgeRock Identity Summit 2017 DusseldorfForgeRock

Webinar: Access Management with the ForgeRock Identity Platform - So What’s N...ForgeRock

The Future is Now: The ForgeRock Identity Platform, Early 2017 ReleaseForgeRock

Webinar: ForgeRock Identity Platform Preview (Dec 2015)ForgeRock

IDP Proxy Concept: Accessing Identity Data Sources Everywhere!ForgeRock

Security On The Edge - A New Way To Think About Securing the Internet of ThingsForgeRock

Empfohlen

Identity Live Sydney 2017 - Ian SorbelloForgeRock

ForgeRock Platform Release - Summer 2016 ForgeRock

HSBC - ForgeRock Identity Summit 2017 DusseldorfForgeRock

Webinar: Access Management with the ForgeRock Identity Platform - So What’s N...ForgeRock

The Future is Now: The ForgeRock Identity Platform, Early 2017 ReleaseForgeRock

Webinar: ForgeRock Identity Platform Preview (Dec 2015)ForgeRock

IDP Proxy Concept: Accessing Identity Data Sources Everywhere!ForgeRock

Security On The Edge - A New Way To Think About Securing the Internet of ThingsForgeRock

Identity Management with the ForgeRock Identity Platform - So What’s New?ForgeRock

The Business Ecosystem is a Neighborhood - ForgeRock Identity Live Austin 2017ForgeRock

NYC Identity Summit Business Day: Identity is the Center of Everything (Mike ...ForgeRock

IoT Wonderland: Understanding the Magic of OAuth2 Device Registration FlowForgeRock

Identity Gateway with the ForgeRock Identity Platform - So What’s New?ForgeRock

Identity Live London 2017 | Daniel RaskinForgeRock

NYC Identity Summit Tech Day: ForgeRock Identity Platform OverviewForgeRock

Directory Services with the ForgeRock Identity Platform - So What’s New?ForgeRock

Digital Trust: How Identity Tackles the Privacy, Security and IoT ChallengeForgeRock

NYC Identity Summit Tech Day: ForgeRock DevOps/Cloud StrategyForgeRock

Identity Live Sydney 2017 - Daniel RaskinForgeRock

OpenAM: An IntroductionForgeRock

Connected Car: Putting Digital Identity Behind the WheelForgeRock

T-Systems. Automating ForgeRock Full Stack Deployments to a Magenta Cloud.ForgeRock

OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, A...ForgeRock

Webinar: Extend The Power of The ForgeRock Identity Platform Through ScriptingForgeRock

NYC Identity Summit Tech Day: Best Practices for API SecurityForgeRock

Open Identity Stack RoadmapForgeRock

OpenAM - An IntroductionForgeRock

The Future is Now: What’s New in ForgeRock Access Management ForgeRock

Microservices and Best Practices Weaveworks

Global Azure 2022 - Architecting Modern Serverless APIs with Azure Functions ...Callon Campbell

Weitere ähnliche Inhalte

Was ist angesagt?

Identity Management with the ForgeRock Identity Platform - So What’s New?ForgeRock

The Business Ecosystem is a Neighborhood - ForgeRock Identity Live Austin 2017ForgeRock

NYC Identity Summit Business Day: Identity is the Center of Everything (Mike ...ForgeRock

IoT Wonderland: Understanding the Magic of OAuth2 Device Registration FlowForgeRock

Identity Gateway with the ForgeRock Identity Platform - So What’s New?ForgeRock

Identity Live London 2017 | Daniel RaskinForgeRock

NYC Identity Summit Tech Day: ForgeRock Identity Platform OverviewForgeRock

Directory Services with the ForgeRock Identity Platform - So What’s New?ForgeRock

Digital Trust: How Identity Tackles the Privacy, Security and IoT ChallengeForgeRock

NYC Identity Summit Tech Day: ForgeRock DevOps/Cloud StrategyForgeRock

Identity Live Sydney 2017 - Daniel RaskinForgeRock

OpenAM: An IntroductionForgeRock

Connected Car: Putting Digital Identity Behind the WheelForgeRock

T-Systems. Automating ForgeRock Full Stack Deployments to a Magenta Cloud.ForgeRock

OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, A...ForgeRock

Webinar: Extend The Power of The ForgeRock Identity Platform Through ScriptingForgeRock

NYC Identity Summit Tech Day: Best Practices for API SecurityForgeRock

Open Identity Stack RoadmapForgeRock

OpenAM - An IntroductionForgeRock

The Future is Now: What’s New in ForgeRock Access Management ForgeRock

Was ist angesagt? (20)

Identity Management with the ForgeRock Identity Platform - So What’s New?

The Business Ecosystem is a Neighborhood - ForgeRock Identity Live Austin 2017

NYC Identity Summit Business Day: Identity is the Center of Everything (Mike ...

IoT Wonderland: Understanding the Magic of OAuth2 Device Registration Flow

Identity Gateway with the ForgeRock Identity Platform - So What’s New?

Identity Live London 2017 | Daniel Raskin

NYC Identity Summit Tech Day: ForgeRock Identity Platform Overview

Directory Services with the ForgeRock Identity Platform - So What’s New?

Digital Trust: How Identity Tackles the Privacy, Security and IoT Challenge

NYC Identity Summit Tech Day: ForgeRock DevOps/Cloud Strategy

Identity Live Sydney 2017 - Daniel Raskin

OpenAM: An Introduction

Connected Car: Putting Digital Identity Behind the Wheel

T-Systems. Automating ForgeRock Full Stack Deployments to a Magenta Cloud.

OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, A...

Webinar: Extend The Power of The ForgeRock Identity Platform Through Scripting

NYC Identity Summit Tech Day: Best Practices for API Security

Open Identity Stack Roadmap

OpenAM - An Introduction

The Future is Now: What’s New in ForgeRock Access Management

Ähnlich wie Pimping the ForgeRock Identity Platform for a Billion Users

Microservices and Best Practices Weaveworks

Global Azure 2022 - Architecting Modern Serverless APIs with Azure Functions ...Callon Campbell

Framework WSo2 orientato ai serviziProfesia Srl, Lynx Group

Real world microservice architectureViacheslav Poturaev

Service-oriented architectureShalva Usubov

MySQL London Tech Tour March 2015 - Embedded Database of ChoiceMark Swarbrick

IBM Internet-of-Things architecture and capabilitiesIBM_Info_Management

Today's Unified Communications: To upgrade, coexist, or go 'all in' with the ...C/D/H Technology Consultants

How companies use NoSQL and Couchbase - NoSQL Now 2013Dipti Borkar

Tokyo Azure Meetup #5 - Microservices and Azure Service FabricTokyo Azure Meetup

Novinky v Oracle Database 18cMarketingArrowECS_CZ

Lantea platformNeuzilla

Apache Geode Meetup, LondonApache Geode

RES Software Online Seminar 10 mei 2011RES Software Nederland

NephOS Product DatasheetNephoScale

KoprowskiT_session1_SDNEvent_WASDforBeginnersTobias Koprowski

What's New in IBM Streams V4.1lisanl

EPAS + Cloud = Oracle Compatible Postgres in MinutesEDB

JakartaOne Livestream CN4J: Eclipse MicroProfile - Your Cloud-Native CompanionJakarta_EE

IBM Connect 2017: Your Data In the Major Leagues: A Practical Guide to REST S...Serdar Basegmez

Ähnlich wie Pimping the ForgeRock Identity Platform for a Billion Users (20)

Microservices and Best Practices

Global Azure 2022 - Architecting Modern Serverless APIs with Azure Functions ...

Framework WSo2 orientato ai servizi

Real world microservice architecture

Service-oriented architecture

MySQL London Tech Tour March 2015 - Embedded Database of Choice

IBM Internet-of-Things architecture and capabilities

Today's Unified Communications: To upgrade, coexist, or go 'all in' with the ...

How companies use NoSQL and Couchbase - NoSQL Now 2013

Tokyo Azure Meetup #5 - Microservices and Azure Service Fabric

Novinky v Oracle Database 18c

Lantea platform

Apache Geode Meetup, London

RES Software Online Seminar 10 mei 2011

NephOS Product Datasheet

KoprowskiT_session1_SDNEvent_WASDforBeginners

What's New in IBM Streams V4.1

EPAS + Cloud = Oracle Compatible Postgres in Minutes

JakartaOne Livestream CN4J: Eclipse MicroProfile - Your Cloud-Native Companion

IBM Connect 2017: Your Data In the Major Leagues: A Practical Guide to REST S...

Mehr von ForgeRock

Digital Identities in the Internet of Things - Securely Manage Devices at ScaleForgeRock

Get the Exact Identity Solution You Need - In the Cloud - AWS and BeyondForgeRock

Identity Live Sydney: Identity Management - A Strategic OpportunityForgeRock

Identity Live Singapore: Transform Your Cybersecurity CapabilityForgeRock

Identity Live Singapore 2018 Keynote PresentationForgeRock

Identity Live Sydney 2018 Keynote PresentationForgeRock

Identity Live Singapore: Just Ask 'EmForgeRock

Identity Live Singapore: Building Trust & Privacy in a Connected SocietyForgeRock

Identity Live Sydney: Intelligent Authentication ForgeRock

Identity Live Sydney: Building Trust and Privacy in a Connected SocietyForgeRock

Get the Exact Identity Solution you Need in the Cloud - Deep DiveForgeRock

Get the Exact Identity Solution You Need - In the Cloud - OverviewForgeRock

ForgeRock and Trusona - Simplifying the Multi-factor User ExperienceForgeRock

Opening Keynote (Identity Live Berlin 2018)ForgeRock

Steinberg - Customer identity as the cornerstone of our approach to digitaliz...ForgeRock

BMW Group - Identity Enables the Next 100 Years.. (Identity Live Berlin 2018)ForgeRock

Trust is Everything - The Future of Identity and the ForgeRock Platform (Iden...ForgeRock

Silo Busters- The Value of User and Data Centricity beyond IoT Devices (Ident...ForgeRock

Shift from GDPR readiness to sustained compliance to improve your business an...ForgeRock

Intelligent Authentication (Identity Live Berlin 2018)ForgeRock

Mehr von ForgeRock (20)

Digital Identities in the Internet of Things - Securely Manage Devices at Scale

Get the Exact Identity Solution You Need - In the Cloud - AWS and Beyond

Identity Live Sydney: Identity Management - A Strategic Opportunity

Identity Live Singapore: Transform Your Cybersecurity Capability

Identity Live Singapore 2018 Keynote Presentation

Identity Live Sydney 2018 Keynote Presentation

Identity Live Singapore: Just Ask 'Em

Identity Live Singapore: Building Trust & Privacy in a Connected Society

Identity Live Sydney: Intelligent Authentication

Identity Live Sydney: Building Trust and Privacy in a Connected Society

Get the Exact Identity Solution you Need in the Cloud - Deep Dive

Get the Exact Identity Solution You Need - In the Cloud - Overview

ForgeRock and Trusona - Simplifying the Multi-factor User Experience

Opening Keynote (Identity Live Berlin 2018)

Steinberg - Customer identity as the cornerstone of our approach to digitaliz...

BMW Group - Identity Enables the Next 100 Years.. (Identity Live Berlin 2018)

Trust is Everything - The Future of Identity and the ForgeRock Platform (Iden...

Silo Busters- The Value of User and Data Centricity beyond IoT Devices (Ident...

Shift from GDPR readiness to sustained compliance to improve your business an...

Intelligent Authentication (Identity Live Berlin 2018)

Kürzlich hochgeladen

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

🐬 The future of MySQL is Postgres 🐘RTylerCroy

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer

08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls

Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung

From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEarley Information Science

Slack Application Development 101 Slidespraypatel2

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

How to convert PDF to text with Nanonetsnaman860154

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Automating Google Workspace (GWS) & more with Apps Scriptwesley chun

Artificial Intelligence: Facts and MythsJoaquim Jorge

Kürzlich hochgeladen (20)

Boost PC performance: How more available memory can improve productivity

🐬 The future of MySQL is Postgres 🐘

Presentation on how to chat with PDF using ChatGPT code interpreter

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

08448380779 Call Girls In Civil Lines Women Seeking Men

Axa Assurance Maroc - Insurer Innovation Award 2024

Driving Behavioral Change for Information Management through Data-Driven Gree...

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

08448380779 Call Girls In Friends Colony Women Seeking Men

Breaking the Kubernetes Kill Chain: Host Path Mount

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

Slack Application Development 101 Slides

Factors to Consider When Choosing Accounts Payable Services Providers.pptx

How to convert PDF to text with Nanonets

How to Troubleshoot Apps for the Modern Connected Worker

Automating Google Workspace (GWS) & more with Apps Script

Artificial Intelligence: Facts and Myths

Pimping the ForgeRock Identity Platform for a Billion Users

4. © 2017 ForgeRock. All rights reserved. ForgeRock Directory Services • Specialized database • Based on LDAP protocol and Data Model • Centralized, Secure, Highly Available, High Throughput, Low Latency • Used by all products: Identity Store, Configuration Store, Session Store, Managed Object Store (next version) • Very good vertical scalability • Benchmark with 500M Users • QA tests for Sanity with 3B Users. 1 week.

5. © 2017 ForgeRock. All rights reserved. The Evolution of Databases • Characteristics of the NoSQL databases • Distributed on Commodity Hardware • Elastic Scaling • Key Value Pairs & Unstructured data • Really designed for ever growing data and real time analysis (Time Series) • Ease of Use through Automation and Orchestration • BUT: • No ACID • Limited Indexing • No Standard

7. © 2017 ForgeRock. All rights reserved. Directory Proxy Server Distributed Identity Architecture The proxy provides … • A single point of access with choice of using REST or LDAP to access underlying LDAP database services. • High service availability, hiding implementation details from LDAP client applications. • LDAP load balancing and failover strategies to handle referrals, connection failures, and network partitions. • Can be deployed with any LDAPv3 identity store. LDAP or REST Tenant 1 Proxy Service Tenant 2 Tenant 3 Tenant 4 LDAP

8. © 2017 ForgeRock. All rights reserved. DIRECTORY SERVICE What’s Next? • Cloud Native • Registration, Discovery and Automation • Horizontal Scalability • Simplification, Optimization of Replication • Data Sharding Data Store Data Store Data Store Data Store Data Store Data Store Data Access Data Store Data Store Data Access Data Access Client AppClient App Client App