Apresentação realizada no evento Seminario sobre serviços gerenciados da Converge.

1. Leveraging identity with Josso, the Professional Open Source

2. Goals Introduce a 4-step Identity Implementation Roadmap Examine the most common Identity Management Project mistakes; and how to avoid them Compare commercial and open source Identity Management Solutions head-to-head Drill down on the JOSSO Open Source Product, Adopters and Case Studies Q&A

3. A non-IAM Adopter Organization

5. End the password nightmare

6. Build service around Identity

8. Leverage – End the password nightmare WHY Increase operational efficiency Increase security HOW Authentication and Authorization still handled within the application tier Point business applications to the authoritative source for looking up user and entitlement records Federate local identity store against authoritative source APPROACHES Connecting authoritative source to identity consumers Business application retrofitting of the identity data layer

9. Service – Build services around identity WHY Enhance user experience Increase operational efficiency Increase security HOW Set up an Asserting Authority capable of emitting security tokens Adopt standards for security token emission, formatting and underlying trust system Shift Authentication and Authorization Processes to the Asserting Authority Leverage Asserting Authority services from business applications and application platforms APPROACHES Implement a Standard-based Access Management Solution

10. Externalize – Push Identity beyond organizational boundaries WHY Achieve interoperation with external organizations/domains Extend the reach of organization’s identity services to the Cloud Bring Public Cloud services on board HOW Introduce support for producing and consuming standard-based assertions (e.g. using the SAML2 protocol) Set up Inbound & Outbound Federated Connections with Partner sites APPROACHES Deliver the Federated Identity capabilities into the Access Management Solution – with little to no impact in the application base Deliver the Federated Identity Capabilities into the Business Application tier – requires retrofitting business applications that need to be externalized; or need to leverage externalized services

11. An IAM Adopter Organization

13. Underestimate technological complexity

14. Underestimate effort

15. Lack of sponsorship

16. Management not knowledgeable about IAM

17. Approach the project in a waterfall style

19. Invest in defining your Identity Architecture up front; scaffolding it in a proof-of-concept (POC)

20. Plan ahead based on realistic time lines

21. Get the right level of sponsorship for your project

22. Look for coaching from IAM SME’s

23. Execute your project using a staged approach, driven by business value and risk mitigation

26. Force you to take a “suite” instead of a best-of-breed approach

27. Usually built on legacy technologies

28. Little extensibility is provided for realizingreal-world scenarios

29. Vendor lock-in

31. Deliver your identity solution based on mix-and-matching components

32. Usually current in terms of architecture and latest trends

33. Highly extensible for introducing your custom extensions if necessary

34. Source code is available and you are free to create your own version of the product

36. JOSSO in a nutshell

37. The JOSSO Experience

38. Distinguished JOSSO Adopters

40. The Solution: Deliver a timely, cost-effective identity and access management back-bone

41. Solution Highlights :

42. JOSSO as the identity stack

43. Based on Weblogic and JBoss environments

44. High-availability and Scalability enabled for Identity and Access Management Services

46. The Solution: Deliver a timely, cost-effective Standard-based Federated Identity Solution without disrupting Communities Ecosystem

47. Solution Highlights :

48. JOSSO and Atricore Identity Bus as the identity stack

49. Federating against Novel Access Management using SAML2

50. High-availability and Scalability enabled for Identity and Access Management Services

52. The Solution: Power the Planet platform with Open Source Identity Management Technology

53. Solution Highlights :

54. JOSSO as the identity stack

56. Contact Information Atricore Inc. : www.atricore.com ParceiroCertificado no Brasil: GoNow: www.gonow.com.br R. Tenerife, 31 – 10º andar Vila Olímpia – São Paulo/SP (11) 3046 2525

57. Perspector Data Slide - DO NOT EDIT This slide holds any pictures that are used by 3D images created with Perspector. The slide will not be displayed when the presentation is viewed as a slide show. If you want to send the presentation to someone else for them to watch, you can delete this slide in the copy that you send (but keep your original presentation for future editing).