Let’s be frank. Your identity platform is only as good as its foundation. “Identity done right” gets done wrong without a rock-solid directory to store and access all that identity data. While certainly not a sexy topic… directory is your plumbing making it a critical aspect regardless of its appeal. Good news for you however, either way you look at it our Directory Services, built from the OpenDJ project, is the gold standard: decades of telco experience led us to develop a high-performance, web-scale directory, delivering throughput in the tens-of-thousands of logins per second. We’re not s*itting you when we say we’ve got a lot of experience where the Sun don’t shine! Webinar Highlights: - Intro to the ForgeRock Identity Platform - New features available in the release - What does performance, scalability, and high availability to manage data for hundreds of millions of users, devices, and things look like? Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

1. © 2016 ForgeRock. All rights reserved.
Directory Services with the ForgeRock
Identity Platform - So What’s New?
• Ludovic Poitou – Product Manager
• Rob MacDonald, Product Marketing Director

2. © 2016 ForgeRock. All rights reserved.
2010 Founded
10 Offices worldwide with headquarters in San Francisco
350+ Employees
450+ Customers
30+ Countries
$52M Funding to date (thru Series C) by Accel Partners,
Foundation Capital and Meritech Capital Partners
ForgeRock is the leading, next-generation,
identity security software platform.

3. © 2016 ForgeRock. All rights reserved.
Perimeter-Based Security Identity-Centric Security
Enables Digital Business
Untrusted
Trusted
Inhibits Digital Business
Old Security Model is Broken. Security Must Now Be
Identity-Based.
Enables Digital BusinessInhibits Digital Business

4. © 2016 ForgeRock. All rights reserved.
Changes are adding Complexity
Employees
Employees &
Partners
Perimeter
Perimeter
Federation
Things
Perimeter-less
Federation
Cloud
SaaS
Mobility
Consumers
Perimeter-less
Federation
Cloud / SaaS
ComplexityofScale
Complexity of Experience

5. © 2016 ForgeRock. All rights reserved.
Identity Access Management
Customers
(millions)
On-premises
People
Applications
and data
PCs
Endpoints
Workforce
(thousands)
Partners and
Suppliers
Customers
(millions)
On-premises Public
Cloud
Private
Cloud
People
Things
(Tens of
millions)
Applications
and data
PCs PhonesTablets
Smart
Watches
Endpoints
Forrester Report Nov 2015: Market Overview: Customer Identity And Access Management (CIAM) Solutions
Identity Relationship Management
Business Has Changed: Enterprises Now Require
Identity Relationship Management (IRM)
Business Has Changed: Enterprises Now Require
Identity Relationship Management (IRM)

6. © 2016 ForgeRock. All rights reserved.
ForgeRock
A Unified, Agile Platform Approach
Legacy
Software
Acquisition
Architecture
Niche
Vendors
Component
Strategy
FINE-GRAINED
ENTITLEMENTS …ADAPTIVE
AUTHN
IDENTITY
MANAGEMENT
ACCESS
MANAGEMENT
IDENTITY
FEDERATION
DIRECTORY
SERVICES
AUTHORIZATION
SERVICES ? …
IDENTITY PLATFORM
Access Management | Identity Management
Directory Services | Mobile and API Gateway
ForgeRock
PLATFORM

7. © 2016 ForgeRock. All rights reserved.
Enterprise AppsMobile Apps Things Cloud
Single Architecture | Next Generation | Open | Chip-to-Cloud Deployments | IRM
Identity ManagementAccess Management Directory Services Identity Gateway
Platform Strategy

8. © 2016 ForgeRock. All rights reserved.
Shared Services : User Interface, Self-Service, REST API, HTTP, Scripting, Audit and Logging
Federation Synchronization
Authentication & Strong
Authentication
Identity Provisioning Application & Service Gateway
Authorization &
UMA Provider
Workflow Engine IoT Identity Gateway
Adaptive Risk Self-Service Password Capture & Replay
UMA Protector
Access Management Identity Management Identity Gateway
Data Store
High Availability
Data Segmentation
LDAP / REST
Directory Services
Open Standards, High Availability, On-Premises, Cloud, Hybrid
The ForgeRock Identity Platform is built from the open source projects OpenAM, OpenIDM, OpenIG and OpenDJ
The ForgeRock Identity Platform

9. © 2016 ForgeRock. All rights reserved.
Directory Services – Core Capabilities
Data Store
High Availability
Multi-Master Replication
Rest & LDAP

10. © 2016 ForgeRock. All rights reserved.
REST/JSON
Access Control
Groups
LDAPv3
Caching
Schema Management
Monitoring
Audit Logging
Services Layer
Password Policies
Backend Services Persistence LDIF
Change Log
Replication
Dynamic Attributes
Access Layer ForgeRock REST OpenDJ SDK LDAPv3 DSML
Admin ConsoleUI Layer
ForgeRock Identity Platform: Directory Services

11. © 2016 ForgeRock. All rights reserved.
Database Backend
• New backend called “PDB”
• Local-backend moved to
similar structure, called “JE”
• Better disk efficiency
• Better performances
• Tuned for OAuth2 and
OpenID Connect services

12. © 2016 ForgeRock. All rights reserved.
Replication Improvements
• New Replication ChangeLog
• Less disk utilization
• Smarter cleanup
• High Availability and
Failover for “cn=changelog”

13. © 2016 ForgeRock. All rights reserved.
Splitting Binaries from Data
• At Setup
• How ? instance.loc
• Still 1 instance for 1 set of
binaries
13

14. © 2016 ForgeRock. All rights reserved.
Other improvements
• Certificate Matching Rules & GSER
(Community Contribution)
• PKCS5S2 Password Storage
• New privilege to access cn=Changelog
• Password Update with REST to LDAP
• New audit capabilities
(across ForgeRock platform)

15. © 2016 ForgeRock. All rights reserved.
Demo

16. © 2016 ForgeRock. All rights reserved.
summits.forgerock.com

17. © 2016 ForgeRock. All rights reserved.
Thank You