Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Canberra Executive Breakfast - A Citizen-Centric Approach to Identity

431 views

Published on

Presentation from the Canberra Executive Breakfast by Adam Butler and Adam Biviano of ForgeRock

Published in: Software
  • DOWNLOAD THAT BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download Full EPUB Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download Full doc Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download PDF EBOOK here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download EPUB Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download doc Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book that can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer that is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story That Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money That the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths that Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THAT BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download Full EPUB Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download Full doc Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download PDF EBOOK here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download EPUB Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... Download doc Ebook here { http://bit.ly/2m6jJ5M } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book that can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer that is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story That Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money That the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths that Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (Unlimited) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://tinyurl.com/y6a5rkg5 } ......................................................................................................................... Download Full EPUB Ebook here { https://tinyurl.com/y6a5rkg5 } ......................................................................................................................... ACCESS WEBSITE for All Ebooks ......................................................................................................................... Download Full PDF EBOOK here { https://tinyurl.com/y6a5rkg5 } ......................................................................................................................... Download EPUB Ebook here { https://tinyurl.com/y6a5rkg5 } ......................................................................................................................... Download doc Ebook here { https://tinyurl.com/y6a5rkg5 } ......................................................................................................................... ......................................................................................................................... ......................................................................................................................... .............. Browse by Genre Available eBooks ......................................................................................................................... Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult,
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • Be the first to like this

Canberra Executive Breakfast - A Citizen-Centric Approach to Identity

  1. 1. © 2016 ForgeRock. All rights reserved. A Citizen-Centric Approach to Identity ForgeRock Executive Breakfast
  2. 2. © 2016 ForgeRock. All rights reserved. FORGEROCK IS THE LEADING, NEXT- GENERATION, IDENTITY SECURITY SOFTWARE PLATFORM. 2010 Founded 10 Offices worldwide with headquarters in San Francisco 350+ Employees 450+ Customers 30+ Countries $52M Funding to date (thru Series C) by Accel Partners, Foundation Capital and Meritech Capital Partners
  3. 3. © 2016 ForgeRock. All rights reserved. Improving the Quality of Government Services with Citizen-Focused Identity Management Daniel Raskin SVP Product Management
  4. 4. © 2016 ForgeRock. All rights reserved. What are the trends?
  5. 5. © 2016 ForgeRock. All rights reserved. Hype Cycle for Digital Government Technology, 2016
  6. 6. © 2016 ForgeRock. All rights reserved. The Top 10 Strategic Technology Trends for Government in 2016
  7. 7. © 2016 ForgeRock. All rights reserved. Top Investment Areas CIOs in the Asia/Pacific and EMEA regions indicate digitalization is a much higher priority than their North American peers.
  8. 8. © 2016 ForgeRock. All rights reserved. Digital Transformation – Top Three Expected Outcomes
  9. 9. © 2016 ForgeRock. All rights reserved. 2016 CIO Agenda: A Government Perspective Key Findings •Digital service transformation is at the embryonic stage of maturity in government •Analytics, infrastructure and cloud computing continue to be the top three technology priorities for government CIOs in all tiers and regions – however security and privacy concerns at an all-time high •CIOs report a 34% adoption rate of bimodal IT in government, slightly lagging behind private industry (38%)
  10. 10. © 2016 ForgeRock. All rights reserved. What is the role of identity?
  11. 11. © 2016 ForgeRock. All rights reserved. Identity Access Management Identity Relationship Management Customers (millions) On-premises People Applications and data PCs Endpoints Workforce (thousands) Partners and Suppliers Customers (millions) On-premises Public Cloud Private Cloud People Things (Tens of millions) Applications and data PCs PhonesTablets Smart Watches Endpoints Digital Transformation & Customer Engagement Require Identity Relationship Management (IRM) PROPRIETARY AND CONFIDENTIAL
  12. 12. © 2016 ForgeRock. All rights reserved. Unified, Omnichannel Citizen Experience Single View Contextual Adaptive Privacy & Consent IntelligenceSecurity Persistent Identity Persistent Identity Across Government Channels PROPRIETARY AND CONFIDENTIAL Mobile ReadyOpen DataCitizen ServicesBusiness ServicesSmart City
  13. 13. © 2016 ForgeRock. All rights reserved. Identity Management Evolves to Relationship Management Identity Lifecycle Management Users, Devices, Things & Services
  14. 14. © 2016 ForgeRock. All rights reserved. Contextual Security Taking Safety to the Next Level Passwordless Authentication Register Device for First Time Authorize Access to Citizen Services Authorize family members to use account Authorize Data to Device / Thing
  15. 15. © 2016 ForgeRock. All rights reserved. Did you just submit your taxes? Did you just register a new car? Kayoko is requesting access to your 2015 taxes. Ok? Did you just conduct a transaction on our citizen portal? We noticed your are using a new iPhone. Would you like to register this device? Did you request access to your birth certificate online? Contextual Identity Enriching the Experience
  16. 16. © 2016 ForgeRock. All rights reserved. Contextual Identity Authentication, Authorization and Consent Mobile PassportCitizen Government Official
  17. 17. © 2016 ForgeRock. All rights reserved. SOA is Dead, but Services on the Rise! 1990s and Early Pre-SOA Monolith to change 2000s Traditional SOA Autonomous but coordinated Present Microservices Decoupled and Independent PWC, Agile coding in enterprise IT: Code small and local
  18. 18. © 2016 ForgeRock. All rights reserved. SOA is Dead, but Services on the Rise! 1990s and Early Pre-SOA Monolith to change 2000s Traditional SOA Autonomous but coordinated Present Microservices Decoupled and Independent PWC, Agile coding in enterprise IT: Code small and local
  19. 19. © 2016 ForgeRock. All rights reserved. Service to Service Interaction Authentication, Authorization and Consent https://api.australia.gov/v1/userinfo Authenticate API Authorize API Calls Authenticate API
  20. 20. © 2016 ForgeRock. All rights reserved. Scaling to Support Distributed Cloud Archs Stateless Architecture • Flexible deployment option to address cloud elasticity and massive horizontal scalability • Configuration can be on a per- realm basis • Stateless = state information is encoded in JWT token • Stateful = tokens persisted in the Core Token Service OpenAM Server OpenAM Server OpenAM Server AWS1 AWS2 AWS3 Microservices Client App Distributed Cloud Environment
  21. 21. © 2016 ForgeRock. All rights reserved.
  22. 22. © 2016 ForgeRock. All rights reserved. The Cloud Conundrum No Portability! Identity Baked in and Constrained to Each Cloud!
  23. 23. © 2016 ForgeRock. All rights reserved. OAuth2/OIDC OAuth2/OIDC OAuth2/OID C OAuth2 The Abstraction of Identity … Again
  24. 24. © 2016 ForgeRock. All rights reserved. Cloud Automation
  25. 25. © 2016 ForgeRock. All rights reserved. Cloud Native: Cattle versus Pets
  26. 26. © 2016 ForgeRock. All rights reserved. Cloud Native: Kangaroos versus Koala Bears
  27. 27. © 2016 ForgeRock. All rights reserved. Cloud Native: Cattle versus Pets Cattle •Cattle are numbers •They are almost identical •When ill, get another (Kill it!) •Thousands of cattle on farm Pets •Pets have names like “pussnboots” •They are lovingly hand raised •When ill, nursed back to health •1 or 2 pets in house Elastic Inelastic
  28. 28. © 2016 ForgeRock. All rights reserved. Container Management & Deployment Product Configuration Product Manifests ForgeRock Images Java Image Tomcat Image … Other Images DOCKER REPOSITORY
  29. 29. © 2016 ForgeRock. All rights reserved. Platform Ubiquity
  30. 30. © 2016 ForgeRock. All rights reserved. We Must Be Better Authentication Authorization Multi-Factor Adaptive Risk Self Service Directory API Security GRC …
  31. 31. © 2016 ForgeRock. All rights reserved. Unified Platform UMA Provider Mobile OTP App Synchronization Auditing LDAPv3 REST/JSON Replication Access Control Schema Management Caching Auditing Monitoring Groups Password Policy Active Directory Pass-thru Reporting Authentication Authorization Provisioning User Self-Service Authentication OIDC / OAuth2 Federation / SSO User Self-Service Workflow Engine Reconciliation Password Replay SAML2 Adaptive Risk Stateless/Stateful Registration Role Provisioning Message Transformation API Security Scripting Built from Open Source Projects: UMA Resource Access Management Identity Management Identity Gateway Directory Services
  32. 32. © 2016 ForgeRock. All rights reserved. U.S. Federal Customers Homeland Security Navy DISA Labor Treasury Energy Commerce Defense
  33. 33. © 2016 ForgeRock. All rights reserved. Norway All Gov’t Agencies Global Government Success … Belgium Citizen ID Canada Citizen Services New Zealand Citizen Services France Unemployment, Retiree Services Australia Tax Office UK NHS, BBC Switzerland National Court System
  34. 34. © 2016 ForgeRock. All rights reserved. Identity Relationship Management: Talkin’ Bout a Revolution Relationship Management Cloud Automation Cloud Readiness Platform Ubiquity Microservices Architecture Contextual Identity
  35. 35. © 2016 ForgeRock. All rights reserved. Thank You
  36. 36. © 2016 ForgeRock. All rights reserved. Doing Authorisation, Consent, and Delegation Right With UMA Eve Maler VP Innovation & Emerging Technology @xmlgrrl
  37. 37. © 2016 ForgeRock. All rights reserved. 37 flickr.com/photos/vincrosbie/16301598031/ CC BY-ND 2.0
  38. 38. © 2016 ForgeRock. All rights reserved. flickr.com/photos/vincrosbie/16301598031/ CC BY-ND 2.0
  39. 39. © 2016 ForgeRock. All rights reserved. flickr.com/photos/delmo-baggins/3143080675 CC BY-ND 2.0
  40. 40. © 2016 ForgeRock. All rights reserved. Attribute sharing scenarios In the next stage of the project … [t]he team will be investigating and testing this to further address the thorny issues of trust and transparency when gaining citizens’ permission. … “[E]ligibility for some services can be quite dynamic, for example, as the level of an individual’s in-work benefits varies, and it may be necessary to carry out on-going eligibility checks from time to time. UMA gives the individual a place to go online where they can see and manage all the consents they have given to different organisations. Until now, managing ongoing consent was tricky,” [Ian Litton] added. “Typically, you asked individuals to consent at a point in time. They tick the T&Cs, which they never see again. UMA should fix that problem.” -- UKA Local Digital, 3 March 2016
  41. 41. © 2016 ForgeRock. All rights reserved. Consumer/clinical health IoT scenarios
  42. 42. © 2016 ForgeRock. All rights reserved. resource owner requesting party authorization server resource server manage delegate control negotiateprotect authorize access manage client consent revoke deny Bruce Wayne shares device data with Dr. McCoy
  43. 43. © 2016 ForgeRock. All rights reserved.
  44. 44. © 2016 ForgeRock. All rights reserved.
  45. 45. © 2016 ForgeRock. All rights reserved.
  46. 46. © 2016 ForgeRock. All rights reserved.
  47. 47. © 2016 ForgeRock. All rights reserved.
  48. 48. © 2016 ForgeRock. All rights reserved.
  49. 49. © 2016 ForgeRock. All rights reserved.
  50. 50. © 2016 ForgeRock. All rights reserved.
  51. 51. © 2016 ForgeRock. All rights reserved.
  52. 52. © 2016 ForgeRock. All rights reserved.
  53. 53. © 2016 ForgeRock. All rights reserved.
  54. 54. © 2016 ForgeRock. All rights reserved. Why enable personal data sharing? clinical research better caredata accuracy
  55. 55. © 2016 ForgeRock. All rights reserved. Why ensure personal control of sharing? new IoT needs new regulatory pressures
  56. 56. © 2016 ForgeRock. All rights reserved. The same architecture applies to Google Apps-style delegation “The enterprise interprets access control as damage and routes around it.”
  57. 57. © 2016 ForgeRock. All rights reserved. Why enable constrained delegation? security/authn governance APIs/IoT
  58. 58. © 2016 ForgeRock. All rights reserved. Why formalize federated authorization? business ownership standard access model
  59. 59. © 2016 ForgeRock. All rights reserved. The CMO and the CPO can and must meet in the middle “Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment. … In order to ensure that consent is freely given, consent should not provide a valid legal ground for the processing of personal data in a specific case where there is a clear imbalance between the data subject and the controller…” We value personal data as an asset Our customers’ wishes have value Our customers have their own reasons to share, not share, and mash up data, which we can address as value-add Risk management perspective Business perspective
  60. 60. © 2016 ForgeRock. All rights reserved. The ForgeRock Identity Platform includes two UMA components authorization server resource server client (sample code provided) UMA Provider (access management) UMA Protector (gateway)
  61. 61. © 2016 ForgeRock. All rights reserved. ForgeRock ForgeRock ForgeRockIdentity ForgeRock Forgerock.com Forgerock.com/blog Thank you!
  62. 62. © 2016 ForgeRock. All rights reserved. Questions? Wrap Up •Feedback Forms •Your Local ForgeRock Team Adam Butler Federal Government Director Adam Biviano Senior Solutions Architect

×