Jamie Nelson, VP of Engineering, ForgeRock John Barco, VP of Product Management, ForgeRock The digital transformation freight train is here which means the platform requirements are changing. This session presents how the ForgeRock platform will evolve moving forward to address requirements of the new interconnected IRM universe.

1. Copyright © Identity Summit 2015, all rights reserved.
The Platform Big Picture
Jamie Nelson, SVP of Global Engineering, ForgeRock
John Barco, VP of Product Management, ForgeRock

2. Copyright © Identity Summit 2015, all rights reserved.
HOW DOES ROI AFFECT PLATFORM
INNOVATION?

3. Copyright © Identity Summit 2015, all rights reserved.
• Attribute Data Store
• Password Policy Store
• API / Mobile Gateway
• App / SSO Gateway
• Registration & Self-Service
• Auditing & Reporting
• Workflow & Business Logic
• Authentication & Session
• Authorization & Policy
• Adaptive Risk
• Federation
Portals,applications,webservices,APIs
APIs
Enterprise Apps
Partners
Cloud Apps
IDM Connectos
Agents
Standards
API
Standards-Based
Gateway
LDAP
REST
APIs
Data

4. Copyright © Identity Summit 2015, all rights reserved.
Return on
Identity
Platform Levers for Maximizing ROI
API Economy
IoT
Scale
IoT
Ready
Privacy &
Consent
Security
Data
Enrichment
Run
Anywhere

5. Copyright © Identity Summit 2015, all rights reserved.
API Economy
API Gateway
e.g. API
Client ResourceAuthN
• Secure services with
standards
• Enable monetization
with auditing and
throttling
• Publish APIs to
developers
• Integrate with any
Identity Provider

6. Copyright © Identity Summit 2015, all rights reserved.
IoT Ready
Supports
Users, Devices
& Things

7. Copyright © Identity Summit 2015, all rights reserved.
Internet of Things Scale
Stateless Sessions
ClusterSize
Demand
Internet
Elastic Load Balancer
• Built on new stateless sessions
• JWT-based sessions
• Per-Realm configuration
• Enables true elastic deployment
• Massive horizontal scalability

8. Copyright © Identity Summit 2015, all rights reserved.
Privacy & Consent
User Managed Access (UMA)
• Standards based privacy and
consent
• Giving people the right to
control access to their data
across providers
• Interoperable OAuth2-based
protocol
• Shipping as an integrated
feature of OpenAM and
OpenIG

9. Copyright © Identity Summit 2015, all rights reserved.
Security
Continuous Authorization
OpenAM Session
Contextual
Change
System Detects
New Location
System detects change
during session and
requests 1x password
• Context based authentication
and authorization
• Includes the device print and
request context in the policy
evaluation
• Custom logic easily integrated
into Policy decisions with
JavaScript, Groovy, or Java
• REST-calls to external Policy
Information Points

10. Copyright © Identity Summit 2015, all rights reserved.
Data Enrichment
Common Audit Framework
Send to Multiple Targets

11. Copyright © Identity Summit 2015, all rights reserved.
MANAGE
PUBLIC
CLOUD
PRIVATE
CLOUD
Run Anywhere
Optimize for Next Generation DevOps Tools
• Focus on enabling common
“DevOps” tools
• Base line parameterized scripts
and tooling
• Integration and protection of
PaaS environments and
applications
• IDP provider and integration
with top IaaS and PaaS
platforms

12. Copyright © Identity Summit 2015, all rights reserved.
Return on
Identity
Platform Levers for Maximizing ROI
API Economy
IoT
Scale
IoT
Ready
Privacy &
Consent
Security
Data
Enrichment
Run
Anywhere

13. Copyright © Identity Summit 2015, all rights reserved.
Thank You!