Sydney Identity Summit: Case Study: TomTom

11
Iden%ty and Access Management Sydney, 9 August 2016

Transcript of Sydney Identity Summit: Case Study: TomTom

Iden%tyandAccessManagementSydney,9August2016

Introduc%on

2

OliverLee–  [email protected]–  SoAwareProductManagerIden%tyandAccessManagementTomTomInterna%onalBV

9August,2016

39August,2016

WhoisTomTom

AtypicalTomTomcustomerjourney

Lessonslearnt

Agenda

WhoisTomTom?

4

•  Globalleaderinnaviga%onandmappingproductsandservicessince1996

•  Welaunchedourfirstconnectedproductsin2008bundledwithLIVEServiceswhichofferedHDTraffic,localsearchandweatherinforma%on.

•  Over77milliondevices•  Navigablemapsin126countries•  Naviga%onsoAware•  Real%meandhistoricalTraffic•  Loca%onbasedservices•  Watches&ac%oncamera

Sports

Naviga-on

9August,2016

59August,2016

ATypicalTomTomCustomerJourney

6

NoIden-ty,NoRela-onships!

9August,2016

ATypicalTomTomCustomerJourney

7

DAM

Services

Services

Services

SSO-SLO

e-commerce

selfservice

MyDriveNavCloud UserStore

MyDriveConnect

IAM

ServiceProvisioning

9August,2016

ATypicalTomTomCustomerJourney

8

UserProvisioning

OpenIDM centralUserrepository usersynchronisa%on

OpenDJ UserCreden%als

Iden%tyandAccessManagement–End-UserIden%%es

SSO-SLO

e-commerc

e

selfservice

MyDriveNavCloud UserStore

IAM

SSO/SLOOpenAM webSingleSignOn/

SingleLogout UserAuthen%ca%on usingSAML

NavCloud

OpenAM SessionManagement usingOAuth2

On-goingprogramtoreplacethelegacyproprietaryplacormwith•  offtheshelfcomponent•  industrystandardprotocols

9August,2016

ATypicalTomTomCustomerJourney

9

DevicesareAuthen%cated&AuthorisedtoaccessTomTom’sLiveservices

OpenAM Authen%ca%onandAuthorisa%onProtocol SAMLOpenDJ En%tlementStoreOpenAM ManagethesessionsOpenIG gatewaybetweenOpenAMandthe

backendservices

DeviceAccessManagement–deviceistheiden%ty

DAM

services

services

services

9August,2016

LessonsLearnt

•  Pickpartnerswithknowledgeofbusiness,architectureandtechnology

•  Openstandardsandofftheshelfcomponents

•  Configura%onandtes%ngratherthandevelopment

•  FromtheIAMjourney,SSO/SLOshouldhavebeenthelastpiecetobedelivered,notthefirst

•  FromworkingwithAutomo%veOEMs,theindustryisJuststar%ngtocometogripswiththirdpartyServices–  Createsopera%onalchallenges–  Maturitylevelsalsovarygreatly:havetobeflexiblewithyoursolu%onand

tes%ng

109August,2016

Iden-tyandAccessManagementOliverLee,SoAwareProductManager,TomTom

119August,2016