Identity Live Sydney 2017 - Daniel Raskin

© 2017 ForgeRock. All rights reserved.

Identity Objects in MirrorAre Closer Than they Appear

Daniel RaskinSVP Product Management


Identity in Action


Devices &

Things

Customers

Employees

# Number of Identities under Management

Iden

tity

Featu

res &

Fu

ncti

on

ali

ty R

eq

uir

ed

Identity Platform: Critical Capabilities


Not Just Users …

Home Assistant Beacon Smart Fryer Smart Basketball

CONSUMER INTERNET OF THINGS

INDUSTRIAL INTERNET OF THINGS

Robotics Transportation Oil & Gas Manufacturing


Massive ScaleHighly-performant, highly

available, database for

managing millions of

relationships

Identity IntelligencePlatform that enables

relationships, access, policy,

lifecycle across users, devices

and things

Persistent IdentityEliminate digital silos and

create unified Experience –

users, devices, things

HTTP(S) / MQTT / COAP / MQTT

APIs/

APPs

HTTP(S)

User Identities

Device Identities

Thing Identities

User Identities

Device Identities

Thing Identities

User Identities

Device Identities

Thing Identities

Region 1 Region 2 Region 3

Data Replication

High Availability

Data Replication

High Availability

Access Management

Identity Management

DIRECTORY SERVICES

Agent / Proxy / Standards / REST Edge Controller / Message Broker

REST /

LDAP

ForgeRock: Driving Relationships Across Users, Devices & Things

Partner Run Customer RunRun AnywhereRun across multiple

landscapes


Identity

Message BrokerForgeRock

Identity PlatformProtocol Translation

IoT Authentication

IoT Authorization

MQTT HTTP

At the Edge In the Cloud

Persistent Identity: Connecting More “Things”


Persistent Identity: Securing The Edge

Identity

Edge ControllerForgeRock

Identity PlatformEnsure Authenticity

Device Discovery

Device Attestation

At the Edge In the Cloud


Intelligence: Building a Unified Profile

• Reduce Friction and provide rapid

access to digital services.

• Build a unified identity profile that

aggregates identity attributes from

many sources.

• Synchronize identity data across

end-to-end business

• Provide Common REST API for

accessing profile data.


Intelligence: Fine-Grained Authentication

• More flexible and modular

authentication processing

• Improved end user

experience via choice & less

intrusion

• Improved security via

increased number of

authentication factors

• More fine grained

administrator configuration

experience

• Readiness for Passwordless /

Passive Authentication


Intelligence: Collecting Attributes Over Time


Intelligence: Fine-Grained Policy


Intelligence: Privacy & Profile Management


Scale: Identity MicroservicesAuthentication, Token Validation and Token Exchange


Run Anywhere: Automation & Elastic Scale

Containers

Configurations

Containers Configurations

Image RegistryAssets Cloud(s)

Making ALL products immutable

Docker / Kubernetes Samples Available


Identity Objects In Mirror

Are Closer Than They Appear

Identity Live Sydney 2017 - Daniel Raskin

Technology

Transcript of Identity Live Sydney 2017 - Daniel Raskin