OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, API's and IoT Devices
•Download as PPTX, PDF•
1 like•1,916 views
The document discusses OpenIG, an identity gateway product from ForgeRock. OpenIG allows legacy applications and APIs to be integrated with identity and access management solutions without modifying the applications. It provides single sign-on, password capture and replay, OAuth 2.0 protection for APIs, and federation capabilities. The latest version of OpenIG includes support for OAuth 2.0, OpenID Connect, scripting with Groovy, SAML federation, and stateless sessions. The document promotes OpenIG as a cost-effective way to extend security and identity features to existing applications.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, API's and IoT Devices
Similar to OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, API's and IoT Devices (20)
More from ForgeRock
More from ForgeRock (20)
Recently uploaded
Recently uploaded (20)
OpenIG Webinar: Your Swiss Army Knife for Protecting and Securing Web Apps, API's and IoT Devices
- 1. Copyright © 2015 ForgeRock, all rights reserved. OPENIG Your Swiss Army Knife
- 2. Copyright © 2015 ForgeRock, all rights reserved. Digital Identity Touches Everything & transforms customer experiences
- 3. Copyright © 2015 ForgeRock, all rights reserved. API ECONOMY Massive shift in how organizations deliver and monetize services…
- 4. Copyright © 2015 ForgeRock, all rights reserved. EMBRACING MOBILE ? You have or plan to have Mobile Apps ? • Built on APIs • Access from anywhere • Require strong security
- 5. Copyright © 2015 ForgeRock, all rights reserved. NEED TO IDENTITY ENABLE? • Legacy apps with no Identity Support? • Web apps without a policy agent - can’t, won’t, don’t want to? • Repeatable and scalable
- 6. Copyright © 2015 ForgeRock, all rights reserved. WHAT IS OPENIG?
- 7. Copyright © 2015 ForgeRock, all rights reserved.
- 8. Copyright © 2015 ForgeRock, all rights reserved. NEW WITH OPENIG 3 • Support for OAuth 2.0 and OpenID Connect • Support for Scripting (Groovy) • Integrated SAMLv2 Federation • Protecting multiple Applications • Stateless Sessions • Easier dynamic configuration
- 9. Copyright © 2015 ForgeRock, all rights reserved. “OpenIG works together with OpenAM to integrate Web applications without the need to modify the target application or the container that it runs in— delivering significant cost- savings.”
- 10. Copyright © 2015 ForgeRock, all rights reserved. OPENIG – USE CASES
- 11. Copyright © 2015 ForgeRock, all rights reserved. TRADITIONAL WAM OpenIG Custom App Legacy DMZ Unsupported ■ Complementary component to OpenAM ■ Acts as a Policy Enforcement Point ■ Extend SSO/ Password Replay to any App ■ Federation SP ■ Works with all WAM solutions
- 12. Copyright © 2015 ForgeRock, all rights reserved. PASSWORD CAPTURE AND REPLAY • When Application: • has a proprietary authentication system • Cannot be modified • Requires a different authentication mechanism Application
- 13. Copyright © 2015 ForgeRock, all rights reserved. FEDERATE AN APPLICATION • Existing application • Cannot be modified, proprietary Authentication • Web Based Enterprise SSO • Multi State Password Replay • Pass headers, variables, replay any web based traffic statefully • Reverse Proxy IdP Circle of Trust Application
- 14. Copyright © 2015 ForgeRock, all rights reserved. SOCIAL LOGIN WITH OIDC • No need to store or manage password • Works with enabled IdP: • OpenAM • Google • Facebook • … Application
- 15. Copyright © 2015 ForgeRock, all rights reserved. PROTECT APIS WITH OAUTH 2.0 • Obtain an OAuth 2.0 token from your IdP • Stick it in the client application • IG verifies the presence, validity and permissions to access APIs API
- 16. Copyright © 2015 ForgeRock, all rights reserved. DEMO
- 17. Copyright © 2015 ForgeRock, all rights reserved. ROADMAP
- 18. Copyright © 2015 ForgeRock, all rights reserved. IG 4.0 ROADMAP • Monitoring, Reporting, Throttling • Token Exchange using OpenAM • Calling OpenAM policy decisions • Common Audit • Management Interface
- 19. Copyright © 2015 ForgeRock, all rights reserved. WHY OPENIG? • Works with all WAM solutions – not just OpenAM • Performant and scalable • Competitive price vs legacy vendors • Customizable through scripting • Repeatable across systems and business units • Production ready
- 20. Copyright © 2015 ForgeRock, all rights reserved. RSA Conference Asia Pacific & Japan 22 - 24 July, 2015 Singapore Gartner Catalyst Conference 10 - 13 August, 2015 San Diego, CA Les Assises 30 September - 3 October, 2015 Monaco WHERE IN THE WORLD IS FORGEROCK? Visit forgerock.com
- 21. Copyright © 2015 ForgeRock, all rights reserved. THANK YOU! Justin Pirie Senior PMM, ForgeRock justin.pirie@forgerock.com @justinpirie Ludovic Poitou OpenIG & DJ PM, ForgeRock Ludovic.poitou@forgerock.com @LudoMP
Editor's Notes
- Gartner Says 4.9 Billion Connected "Things" Will Be in Use in 2015 In 2020, 25 Billion Connected "Things" Will Be in Use http://www.gartner.com/newsroom/id/2905717 Cisco estimates that 50 billion devices and objects will be connected to the Internet by 2020. http://www.cisco.com/web/solutions/trends/iot/portfolio.html
- Salesforce.com for example, generates nearly 50 percent of its annual $3 billion in revenue through APIs; for Expedia, that figure is closer to 90 percent of $2 billion: http://www.forbes.com/sites/mckinsey/2014/01/07/ready-for-apis-three-steps-to-unlock-the-data-economys-most-promising-channel/
- Billions of apps downloaded
- A powerful, flexible, lean, identity centric gateway to secure all accesses to applications and APIs
- OpenIG is a Java-based reverse proxy which runs as a web application in a web container like Tomcat. HTTP traffic is routed through OpenIG, enabling close inspection, transformation and filtering of each request. By inspecting the traffic, OpenIG is able to intercept requests, capture the user's login credentials, and send the necessary HTTP request to the target application, thereby logging in the user without modifying or installing anything on the application.