ForgeRock Identity Live 2017 - Dusseldorf

1. © 2017 ForgeRock. All rights reserved.
Digital Identity – Monetizing
Customer Relationships
Victor Ake
VP, Customer Innovation
Chris Kawalek
Director, Product Marketing

2. © 2017 ForgeRock. All rights reserved.
DIGITAL TRANSFORMATION
“THE CHANGES ASSOCIATED WITH THE
APPLICATION OF DIGITAL TECHNOLOGY IN
ALL ASPECTS OF HUMAN SOCIETY”
- Wikipedia
… IT’S A BUSINESS TRANSFORMATION

3. © 2017 ForgeRock. All rights reserved.
BUSINESS TRANSFORMATION
CUSTOMER
SATISFACTION
SPEED
TO
MARKET
PROFITS

4. © 2017 ForgeRock. All rights reserved.
INFLUENCES ON DIGITAL
TRANSFORMATION
Customer Behavior and DemandTechnology Innovation External Environmental Factors
REGULATIONS
POLITICS
GLOBAL
ECONOMY
SOCIAL
COMPLIANCE COMPETITORS
ENVIIRONMENT

5. © 2017 ForgeRock. All rights reserved.
CUSTOMER IS THE COMMON
DENOMINATOR
Customer Behavior and Demand
Customer Satisfaction
IDENTITY–CENTRIC TRANSFORMATION

6. © 2017 ForgeRock. All rights reserved.
Identity
Relationship
Management
IDENTITY RELATIONSHIP MANAGEMENT
THE
CENTER
OF
DIGITAL
TRANSFORMATION

7. © 2017 ForgeRock. All rights reserved.
DIGITAL CUSTOMER IDENTITY IS CORE
GET TO
KNOW YOUR
CUSTOMER
GIVE THEM
WHAT THEY
WANT
MAKE THEM
FEEL UNIQUE
MULTIPLE
CHANNELS
RESPECT
THEM
RELATIONSHIPS

8. © 2017 ForgeRock. All rights reserved.
KNOW YOUR CUSTOMER
Onboard new customers
Use existing information
Profile Data Aggregation
Workflows
Store Relationships
Ask for consent when storing aggregated data
Data storing and processing regulations
Store the consent
Sense Context when onboarding

9. © 2017 ForgeRock. All rights reserved.
GIVE THEM WHAT THEY WANT
User Interface Consistency
Low Friction
Signing Up/Signing In
User Experience
Secure Interactions
Continuous & Adaptive Security
Adaptive Authentication & Authorization
Digital Identity can be “The Brand”

10. © 2017 ForgeRock. All rights reserved.
MAKE THEM FEEL UNIQUE
Personalization of services
Learn with every Interaction
Use Context
Leverage Relationships
Ask for consent when storing sensitive data
Regulations in each country
Loyalty Cards / Join ecosystems
Give something of value in return

11. © 2017 ForgeRock. All rights reserved.
MULTI-CHANNEL EXPERIENCE
Provide multiple channels to your services
Join/Create ecosystems
Amazon Echo/Alexa; Google Home; etc
IoT Partnerships
APIs to create your own ecosystems
Allow true omni-channel experience
Apply Continuous Security to create Trust
Adaptive Authentication
Adaptive Authorization
Keep track of trusted devices
Use IoT Technology, when possible

12. © 2017 ForgeRock. All rights reserved.
Customers are the smartest people
Respect their privacy wishes
Important to ask for consent
Revocation of consent at any time
any moment
Provide opt-out
GDPR can be an opportunity
RESPECT THEM
Do not deny access to the service
do fine-grain consent instead
RESPECT CREATES TRUST
TRUST HAS VALUE
Be the custodian of your customer’s data

13. © 2017 ForgeRock. All rights reserved.
Use technology standards
Create communities
Partner with experts on the subject
MORE LEMBAS BREAD…
Do not forget your legacy systems
Use Identity as a Platform not as an add-on
TRUST
CONQUERS ALL
IDENTITY IS AT THE CENTER
OF EVERYTHING
Customers come by millions, be sure to
scale up

14. © 2017 ForgeRock. All rights reserved.
CIAM, IoT, and
The Future of Identity
Victor Ake
VP, Customer Innovation
Chris Kawalek
Director, Product Marketing

15. © 2017 ForgeRock. All rights reserved.
Employees
Partners
Mobile
Customers
IoT / Edge
Relationships
Legacy Identity
Customer Identity
Relational Identity

16. © 2017 ForgeRock. All rights reserved.
IOT AS A BUSINESS ENABLER
CONSUMER
PRODUCTS
CUSTOMER
EXPERIENCE
INDUSTRY 4.0
(OT)
OPERATIONAL
EFFICIENCY
ASSET
MANAGEMENT
IT CAN TOUCH SEVERAL AREAS OF AN ORGANIZATION
SOME INDUSTRIES HAVE BEEN COMPLETELY TRANSFORMED
CONSUMER PRODUCTS ARE NOW IT PLATFORMS

17. © 2017 ForgeRock. All rights reserved.
IOT AS A DELIVERY CHANNEL
PROVIDE NEW PRODUCTS AND SERVICES
INTERACT DIRECTLY WITH CUSTOMERS
RICH CONTEXT INTERACTIONS
UPDATES & NEW FEATURES ON THE FLY
OPTIMIZATION

18. © 2017 ForgeRock. All rights reserved.
PERSONA DIGITAL IDENTITIES
SERVICES
- APPLICATIONS/APIs
- BIG DATA
- MICROSERVICES
AUTHENTICITY (I AM NOT A ROBOT)
PROVISIONING/REGISTRATION
AUTHENTICATION
ACCESS CONTROL/AUTHORIZATION
CONTINUOUS/ADAPTIVE SECURITY
USERS
- CONSUMER
- CUSTOMER
- PARTNER
- EMPLOYEE
Access Application, Update Data,
Share data, APIs, etc

19. © 2017 ForgeRock. All rights reserved.
THING/DEVICE DIGITAL IDENTITIES
SERVICES
- APPLICATIONS/APIs
- BIG DATA
- MICROSERVICES
Data, Usage, Failures, Warnings, Features Used
Feature requests, Configuration requests,
Contextual Information
Configuration, ad-hoc services, updates,
new features, new functionality, optimization,
Response to conditions, Notifications
DEVICES AND THINGS
AUTHENTICITY (I AM LEGIT)
PROVISIONING/REGISTRATION
AUTHENTICATION
ACCESS CONTROL/AUTHORIZATION
CONTINUOUS/ADAPTIVE SECURITY
MQTT, CoAP
HTTP(S)
HTTP(S)
CONSTRAINED
NON-CONSTRAINED

20. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITY RELATIONSHIPS
SERVICES
- APPLICATIONS/APIs
- BIG DATA
- MICROSERVICES
DEVICES AND THINGS
- CONSTRAINED
- NON-CONSTRAINED
Pair, Take ownership,
Notifications, Request to Consent
Consent, Send on my Behalf,
Unpair, Revoke consent
CREATE/REMOVE RELATIONSHIP
TAG DATA (SOURCE & OWNER)
CONTINUOUS/ADAPTIVE SECURITY
PRIVACY
CONSENT
USERS

21. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITIES FOR EVERYTHING
EVERYONE & EVERYTHING
HAS A DIGITAL IDENTITY
USERS
SERVICES
DEVICES AND THINGS

22. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITIES FOR EVERYTHING
USERS
SERVICES
DEVICES AND THINGS
IDENTITY LIFE-CYCLESCALABILITY
AVAILABILITY
DATA IN TRANSIT
REGULATIONS
CONTINUOUS SECURITY
PRIVACYCONSENT MANAGEMENT
DATA AT REST
RELATIONSHIP MANAGEMENT
DATA AT REST
AVAILABILITY

23. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITY PLATFORM
USERS
SERVICES
DEVICES AND THINGS
END TO END SECURITY, IDENTITY & ACCESS MANAGEMENT + PRIVACY & CONSENT

24. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITIES ON THE EDGE
SERVICES
DEVICES AND THINGS
EDGE
IoT GATEWAY
USERS
EDGE
µSERVICES
END TO END SECURITY, IDENTITY & ACCESS MANAGEMENT + PRIVACY & CONSENT
CLOUD, ON PREM, ETC

25. © 2017 ForgeRock. All rights reserved.
SECURING THE EDGE
ForgRock Identity
Edge Controller
ForgeRock
Identity Platform
Ensure Authenticity
Device Discovery
Device Attestation
At the Edge In the Cloud

26. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITIES ON THE EDGE
SERVICES
DEVICES AND THINGS
EDGE
IoT GATEWAY
USERS
EDGE
µSERVICES
END TO END SECURITY, IDENTITY & ACCESS MANAGEMENT + PRIVACY & CONSENT
CLOUD, ON PREM, ETC

27. © 2017 ForgeRock. All rights reserved.
THE IDENTITY, MULTI-CLOUD NEURAL
NETWORK
ForgeRock
Microservices
Authentication
Session Validation
Token Exchange
= A Cloud Microservice

28. © 2017 ForgeRock. All rights reserved.
DIGITAL IDENTITIES & RELATIONSHIPS
SMART CAR
MANUFACTURED BY, SEND DATA TO
ON BEHALF OF,
INSURANCE COMPANY
CAR MANUFACTURER
SHARES DATA
LIVES WITH
BANK
TOLLS & PARKING

29. © 2017 ForgeRock. All rights reserved.
IT’S NOT “WHO” YOU ARE….

30. © 2017 ForgeRock. All rights reserved.
IT’S “WHO” YOU KNOW!

31. © 2017 ForgeRock. All rights reserved.
RELATIONSHIPS define the CONTEXT
SMART CAR
MANUFACTURED BY, SEND DATA TO
ON BEHALF OF,
INSURANCE COMPANY
CAR MANUFACTURER
SHARES DATA
LIVES WITH
BANK
TOLLS & PARKING

32. © 2017 ForgeRock. All rights reserved.
IOT RELATIONSHIPS ARE NOT
HIERARCHICAL

33. © 2017 ForgeRock. All rights reserved.
RATHER, RELATIONSHIPS ARE A GRAPH

34. © 2017 ForgeRock. All rights reserved.
IDENTITY PROVIDES THE
FRAME OF REFERENCE

35. © 2017 ForgeRock. All rights reserved.
INSTEAD OF HAVING TO TRANSLATE

36. © 2017 ForgeRock. All rights reserved.
IDENTITY IS THE COMMON LANGUAGE

37. © 2017 ForgeRock. All rights reserved.
THINGS GENERATE OR
RESPOND TO DATA

38. © 2017 ForgeRock. All rights reserved.
GENERATING DATA
• What “Thing” is generating this data?
• Can I trust it?
• How do I know which thing this is?
• What is the data about?
• Can I trust the data?
• Who owns this data?

39. © 2017 ForgeRock. All rights reserved.
RESPONDING TO DATA
• Who is issuing the commands?
• Can I trust the issuer?
• Can I trust the commands?
• Are they for me?

40. © 2017 ForgeRock. All rights reserved.
ForgeRock
Identity
Message Broker ForgeRock
Identity PlatformProtocol Translation
IoT Authentication
IoT Authorization
MQTT HTTP
At the Edge In the Cloud
SPEAKING IOT FOREIGN LANGUAGE

41. © 2017 ForgeRock. All rights reserved.
Providing driver
authentication and
authorization for
connected cars

42. © 2017 ForgeRock. All rights reserved.
Thank You!