Sydney Identity Summit presentation by Oliver Lee, Software Product Manager, Identity and Access Management, TomTom

1. Iden%ty and Access Management
Sydney, 9 August 2016

2. Introduc%on
2
Oliver Lee
– Oliver.Lee@tomtom.com
– SoAware Product Manager
Iden%ty and Access Management
TomTom Interna%onal BV
9 August, 2016

3. 3 9 August, 2016
Who is
TomTom
A typical
TomTom
customer
journey
Lessons
learnt
Agenda

4. Who is TomTom?
4
• Global leader in naviga%on and mapping
products and services since 1996
• We launched our first connected
products in 2008 bundled with LIVE
Services which offered HD Traffic, local
search and weather informa%on.
• Over 77 million devices
• Navigable maps in 126 countries
• Naviga%on soAware
• Real %me and historical Traffic
• Loca%on based services
• Watches & ac%on camera
Sports
Naviga-on
9 August, 2016

5. 5 9 August, 2016

6. A Typical TomTom Customer Journey
6
No Iden-ty, No Rela-onships !
9 August, 2016

7. A Typical TomTom Customer Journey
7
D
A
M
Services
Services
Services
S
S
O
-
S
L
O
e-
commerce
self
service
MyDrive NavCloud User
Store
MyDrive
Connect
IAM
Service
Provisioning
9 August, 2016

8. A Typical TomTom Customer Journey
8
User Provisioning
OpenIDM central User repository
user synchronisa%on
OpenDJ User Creden%als
Iden%ty and Access Management – End-User Iden%%es
S
S
O
-
S
L
O
e-
commerc
e
self
service
MyDrive
NavCloud User
Store
IAM
SSO / SLO
OpenAM web Single Sign On /
Single Logout
User Authen%ca%on
using SAML
NavCloud
OpenAM Session Management
using OAuth2
On-going program to replace the legacy proprietary
placorm with
• off the shelf component
• industry standard protocols
9 August, 2016

9. A Typical TomTom Customer Journey
9
Devices are Authen%cated & Authorised to
access TomTom’s Live services
OpenAM Authen%ca%on and Authorisa%on
Protocol SAML
OpenDJ En%tlement Store
OpenAM Manage the sessions
OpenIG gateway between OpenAM and the
backend services
Device Access Management – device is the iden%ty
D
A
M
services
services
services
9 August, 2016

10. Lessons Learnt
• Pick partners with knowledge of business, architecture and technology
• Open standards and off the shelf components
• Configura%on and tes%ng rather than development
• From the IAM journey, SSO/SLO should have been the last piece to be
delivered, not the first
• From working with Automo%ve OEMs, the industry is Just star%ng to
come to grips with third party Services
– Creates opera%onal challenges
– Maturity levels also vary greatly: have to be flexible with your solu%on and
tes%ng
10 9 August, 2016

11. Iden-ty and Access Management
Oliver Lee, SoAware Product Manager, TomTom
11 9 August, 2016