borderless identity - “the enterprise identity bus”

Post on 15-Jan-2015

518 Views

Category:

Technology

2 Downloads

Preview:

Click to see full reader

DESCRIPTION

Centralized identity management is dead. Passwords should be dead. The identity assumptions of the first 50 years of computing are no longer meeting the needs of the 21st Century. We need to use Open Standards and Open security models to federate identity and access control - not just across organizations but across different technologies, different standards and different models. The concept of an Identity Bus is a reference architecture for solving these problems and creating a strategically federated approach to identity, and creating approaches that support borderless identity.

TRANSCRIPT

Borderless Identity“The Enterprise Identity Bus”

Paul FremantleCTO and Co-Founder, WSO2

paul@wso2.com @pzfreo #wso2

• CTO and Co-Founder, WSO2• Chair of OASIS standard• Apache Committer• Regular speaker• PhD student

o In a band: Revel Weird and Wild

o Plays flute and mandolino Father of two childreno Keen snowboarder

Connected Business

Connected Car

Credits: https://angel.co/carvoyant

Connected Car of the Year 2013 – Mercedes Benz S Class

• Connected Car is reconnecting car makers to their customers • Creating new ecosystems of App Providers• Creating new Big Data• And creating new challenges around Identity and Access

Management

Connected Plane(Connected Supply Chain)

Connected Government

Connected Everything

Offer and Manage APIsto the rest of the world

Understanding a Connected Business

https://www.flickr.com/photos/1stpix_diecast_dioramas/https://www.flickr.com/photos/1stpix_diecast_dioramas/

Borders don’t work any more

Why?

• BYOD / BYO Everything• APIs• IoT • Ecosystems• Mergers / Acquisitions• Value Webs

SAML

SAMLSAML

SAML

Spaghetti Identity

SAML

SAML

SAML

SAML

SAML

SAML

SAML

The history of integration in Enterprises

• Single EAI hub• Departmental ESBs• The cross-ESB ESB • APIs and true federation

https://www.flickr.com/photos/jaredzimmerman

https://www.flickr.com/photos/cobalt

Federated Identity Silos

SAML

SAML

SAML

OIDC

OIDC

OIDC

OpenID

OpenID

OpenID

Connected! – But Yet Disconnected

SAML

SAML

SAML

OIDC

OIDC

OIDC

OpenID

OpenID

OpenID

What is the lesson?

A single monolithic identity model just won’t work

GSMA Mobile Connect

OpenID Connect Discovery

Registry model of integration

The Enterprise Identity Bus

What does an Enterprise Identity Bus do?

• Bridges betweenTokens – OAuth/2, OpenID/OIDC, SAML2, WS-Federation, Kerberos, etcClaims and Claims Dialects – email addresses, phone numbers,

names, etcProvisioning

SPML, SCIM, Salesforce, Google, etcJust in Time provisioning, inbound, outbound

Who is building a connected business?

• The only company to build a complete platform for a Connected Business in a single codebase– Including the Enterprise Identity Bus

• The only company to have the same platform deploy on-premise, in private cloud, and in a public cloud

• 100% open source

WSO2 Identity Server 5.0 Launching May 21st 2014

Invention comes in many forms and at many scales. The most radical and transformative of inventions are often those that empower others to unleash their creativity – to pursue their dreams.

Jeff Bezos

“ “

Thank youpaul@wso2.comhttp://wso2.com/contacthttp://pzf.fremantle.org@pzfreo#wso2

top related