The document discusses challenges with delivering identity and access management (IAM) solutions at scale over time. It describes the organization's journey from initial proofs of concepts with SAML in 2008 to gradually establishing SAML, OAuth, and OpenID Connect as operationalized solutions by 2015. As more applications were integrated, the need to improve the speed and automation of solutions delivery became clear. Lessons learned include realizing that standardization has limits and that automation is still limited for legacy systems. The organization continues working to refine its approach to delivering IAM solutions to many applications.

1. The Last Mile
Delivering
All
the
Solu0ons
to
All
the
Applica0ons
All
of
the
Time
Jon
Leh0nen
@jonleh0nen
Service
Deliver
Leader
–
SSO
Integra0ons
June
8,
2015

2. The
views
and
opinions
expressed
in
this
presenta0on
(though
true
and
good
IMO)
are
my
own
and
do
not
necessarily
represent
the
views
or
opinions
of
my
employer
or
any
of
its
subsidiaries.

3. Service Delivery Leader – SSO Integra9ons
• Opera0onalize
the
service
delivery
of
AuthN/AuthZ
solu0ons
• Work
with
customers
to
pair
their
needs
with
an
offered
solu0on
• Integrate
customer
app/service/api/whatever
into
our
SSO
framework

5. The Solu9ons Trap

8. Solu0ons
Opera0ons
SSO Organiza9on

9. SSO Organiza9on

10. Delivering Solu9ons, At Scale

11. Delivering Opera9ons, At Scale

12. Solu0ons
Opera0ons
SSO Organiza9on
Integra0ons

14. CIS
SOLUTIONS
ARE
NOT
AS
IMMEDIATELY
APPLICABLE
AS
THEY
APPEAR

15. What has worked.

16. Cadence of Solu9on Delivery
2015
2009
2010
2011
2012
2013
2014
2008
2016
SAML
POC
SAML
Established
Legacy
WAM
to
Federated
Cloud
Migra0on
Launched
Modern
Integra0ons
Established
SAML
Opera0onalized
OAuth
POC
OIDC
POC
OIDC
Opera0onalized
OAuth
Opera0onalized
Legacy
Agent
Self-­‐
Service
Chef/Automa0on
Efforts
w/
Web
NextGen
Agent
Self-­‐
Service

17. Scale Solu9ons Delivery to Solu9ons
0
200
400
600
800
1000
2008
2009
2010
2011
2012
2013
2014
2015
Prod
SAML
Integra0ons
Operationalized w/
Integrations

18. Scale Solu9ons Delivery to Solu9ons
0
100
200
300
400
500
600
700
800
900
Prod
Unique
OAuth
Clients
Client_IDs
0
5
10
15
20
25
30
35
40
January
February
March
April
May
Prod
Apps
Using
OIDC
Apps
using
OIDC
Opera0onalized
w/
Integra0ons
Opera0onalized
w/
Integra0ons

19. Cadence of Solu9on Delivery
2015
2009
2010
2011
2012
2013
2014
2008
2016
SAML
POC
SAML
Established
Legacy
WAM
to
Federated
Cloud
Migra0on
Launched
Modern
Integra0ons
Established
SAML
Opera0onalized
OAuth
POC
OIDC
POC
OIDC
Opera0onalized
OAuth
Opera0onalized
Legacy
Agent
Self-­‐
Service
Chef/Automa0on
Efforts
w/
Web
NextGen
Agent
Self-­‐
Service

20. Cadence of Solu9on Delivery
2015
2009
2010
2011
2012
2013
2014
2008
2016
Modern
Integra0ons
Established
SAML
–
6
years
Oauth
2
11
Mos
OpenIDC
4
Mos
Legacy
WAM
to
Federated
Cloud
Migra0on
Launched

21. 0
2000
4000
6000
8000
10000
12000
2008
2009
2010
2011
2012
2013
2014
2015
Federa0on
Agent-­‐Based
Prod
WAM
Agent-­‐
Based
Apps
Prod
SAML
Apps
Scaling Speed of Solu9ons Delivery

22. Virtuous Cycle
Solu0ons
gonna
solu0on
Integra0ons
adds
solu0on
to
service
library
Customers’
needs
change,
current
offerings
are
not
enough,
BU
needs
something
different
If
Integra0ons
can’t
solve
it
bring
the
new
use
case
to
Solu0ons

23. Lessons Learned, & Opportuni9es for
Improvement

24. The Myth of “Standard and Repeatable”

25. Being Big before GeXng Small
App
App
App
App
IAM
Infra
SSO
Integra0ons

26. Being Big before GeXng Small
App
App
App
App
IAM
Infra
SSO
Integra0ons

27. Limited Automa9on for Legacy Systems

28. Cadence of Solu9on Delivery
2015
2009
2010
2011
2012
2013
2014
2008
2016
Modern
Integra0ons
Established
SAML
–
6
years
Oauth
2
11
Mos
OpenIDC
4
Mos
Legacy
WAM
to
Federated
Cloud
Migra0on
Launched

29. Ques9ons?
Jon
Leh0nen
@jonleh0nen
jon.leh0nen@gmail.com
Jon.leh0nen@ge.com