Identity Gateway with the ForgeRock Identity Platform - So What’s New?
Download as PPTX, PDF4 likes1,721 views
The document discusses the ForgeRock Identity Platform, highlighting its growth as a leading open-source identity security software provider since its founding in 2010. It emphasizes the shift from perimeter-based to identity-centric security models, supporting over 500 million identities and aims for market leadership in digital transformation and security. Key features include improved API protection, mobile-first strategy, and enhanced scalability and performance of the identity gateway.
Identity Gateway with the ForgeRock Identity Platform - So What’s New?
- 1. © 2016 ForgeRock. All rights reserved. Identity Gateway with the ForgeRock Identity Platform - So What’s New? • Ludovic Poitou – Product Manager • Rob MacDonald, Product Marketing Director
- 2. © 2016 ForgeRock. All rights reserved. ForgeRock: At a Glance • Fastest-growing open source identity security software company in the world • Founded: 2010 • Headquartered in San Francisco with offices in 6 countries • Employees: 350+ • Customers: 400+ Enterprises in 30+ countries • Global Reach: ~50% international revenue • Funding to Date (thru Series C): $52M • Investors: Accel Partners, Foundation Capital and Meritech Capital Partners Key Facts Mission Statement The forgerock identity platform currently powers more than 500 million identities. It is our goal to become the market leader in digital transformation and security for enterprise identity worldwide.
- 3. © 2016 ForgeRock. All rights reserved. Perimeter-Based Security Identity-Centric Security Enables Digital Business Untrusted Trusted Inhibits Digital Business Old Security Model is Broken. Security Must Now Be Identity-Based. Enables Digital BusinessInhibits Digital Business
- 4. © 2016 ForgeRock. All rights reserved. Changes are adding Complexity Employees Employees & Partners Perimeter Perimeter Federation Things Perimeter-less Federation Cloud SaaS Mobility Consumers Perimeter-less Federation Cloud / SaaS ComplexityofScale Complexity of Experience
- 5. © 2016 ForgeRock. All rights reserved. Identity Access Management Customers (millions) On-premises People Applications and data PCs Endpoints Workforce (thousands) Partners and Suppliers Customers (millions) On-premises Public Cloud Private Cloud People Things (Tens of millions) Applications and data PCs PhonesTablets Smart Watches Endpoints Forrester Report Nov 2015: Market Overview: Customer Identity And Access Management (CIAM) Solutions Identity Relationship Management Business Has Changed: Enterprises Now Require Identity Relationship Management (IRM) Business Has Changed: Enterprises Now Require Identity Relationship Management (IRM)
- 6. © 2016 ForgeRock. All rights reserved. Enterprise AppsMobile Apps Things Cloud Single Architecture | Next Generation | Open | Chip-to-Cloud Deployments | IRM Identity ManagementAccess Management Directory Services Identity Gateway Platform Strategy
- 7. © 2016 ForgeRock. All rights reserved. Shared Services : User Interface, Self-Service, REST API, HTTP, Scripting, Audit and Logging Federation Synchronization Authentication & Strong Authentication Identity Provisioning Application & Service Gateway Authorization & UMA Provider Workflow Engine IoT Identity Gateway Adaptive Risk Self-Service Password Capture & Replay UMA Protector Access Management Identity Management Identity Gateway Data Store High Availability Data Segmentation LDAP / REST Directory Services Open Standards, High Availability, On-Premises, Cloud, Hybrid The ForgeRock Identity Platform is built from the open source projects OpenAM, OpenIDM, OpenIG and OpenDJ The ForgeRock Identity Platform
- 8. © 2016 ForgeRock. All rights reserved. Throttling Message Transformation Monitoring Session Management Token Exchange SSO Scripting Relying Party Authentication Authorization Federation (SAML / OIDC) Password Capture & Replay Protected Resources Identity Providers Data Stores Web Applications APIs Services Layer Access Layer HTTP / HTTPS OAuth2.0 | OpenID Connect | SAMLv2 External Layer Databases Directories Files Audit ForgeRock Identity Platform: Identity Gateway
- 9. © 2016 ForgeRock. All rights reserved. Accelerate your Digital Transformation • APIs are the secret sauce to becoming digital • Enable the level of business agility and interconnectedness. • Identity is core to business and security 9
- 10. © 2016 ForgeRock. All rights reserved. Why a Gateway? • Mobile First Strategy • Protect APIs • From Mobile to Enterprise Federation • Micro-Services Architecture • Route to and Protect APIs • Bridging to IoT • Security • Extend to Legacy 10
- 11. © 2016 ForgeRock. All rights reserved. ForgeRock Identity Gateway • A Gateway with many facets: • Identity • API • Mobile • Security • …
- 12. © 2016 ForgeRock. All rights reserved. Identity Gateway • Improved support for OpenID Connect • Discovery • Registration • Centralized Authorization Policy with OpenAM • Simplified Password Replay
- 13. © 2016 ForgeRock. All rights reserved. ForgeRock identity Gateway as API Gateway • Throttling • Global • Per protected API or Application • Monitoring • Status • Throughput and Response Times statistics • Auditing
- 14. © 2016 ForgeRock. All rights reserved. Other Improvements • Security • Control of TLS protocols and cipher suites • Mobile Gateway • Token exchange from OAuth2 to SAMLv2 • Better scalability and performances • Improved ease of configuration
- 15. © 2016 ForgeRock. All rights reserved. Demo 15
- 16. © 2016 ForgeRock. All rights reserved. Discovery and Client Registration… Identity Gateway Application ForgeRock Access Management ?
- 17. © 2016 ForgeRock. All rights reserved. API Protection Identity Gateway APIs ForgeRock Access Management Throttling Authorization
- 18. © 2016 ForgeRock. All rights reserved. Q&A 18
- 19. © 2016 ForgeRock. All rights reserved. Thank You! 19
Editor's Notes
- #9: Slide 15: OpenDJ architecture Management layer for managing end users Access layer where common rest API across entire portfolio to access and manage identity services and can use LDAP Service layers of replications and monitoring and schema management built into the product External layer for plugging into third party –synchs with active directory. Can talk with OpenDJ.