Modern Identity: Heterogeneity and Distance (Cloud Identity Summit Keynote)
•
4 likes•879 views
Keynote from Cloud Identity Summit 2014 (July 21). Focusing on modern identity's two primary attributes: heterogeneity and distance. Discusses the requirement for adaptive and local biometric authentication in the modern identity era, with specifics on OAuth/OpenID Connect, federation, and WAM.
Recommended
Recommended
More Related Content
Similar to Modern Identity: Heterogeneity and Distance (Cloud Identity Summit Keynote)
Similar to Modern Identity: Heterogeneity and Distance (Cloud Identity Summit Keynote) (20)
Recently uploaded
Recently uploaded (20)
Modern Identity: Heterogeneity and Distance (Cloud Identity Summit Keynote)
- 1. heterogeneity and distance Mark Diodati modern identity:
- 3. 99 sessions
- 5. 12 hours of workshops
- 7. 24 sessions
- 8. 12 hours of sessions
- 13. caffeinate
- 14. hydrate
- 16. get some rest
- 17. take good notes
- 18. get outside
- 19. make a friend
- 20. modern identity
- 21. applications services user constituencies devices
- 22. heterogeneity
- 23. distance
- 24. distance: span of control
- 25. on-premises in the cloud applications
- 26. self-managed partner-managed SaaS-managed applications
- 27. IaaS SaaS PaaS applications
- 28. traditional IAM IDaaS identity bridge services
- 30. employees partners contractors users customers
- 31. AD-joined PC/Mac COPE devices devices BYOD devices PC/Mac mobile devices
- 33. application support 4 things that matter
- 34. identity assurance 4 things that matter
- 35. identity assurance cost 4 things that matter
- 36. $10,000 barn $5,000 horse
- 37. 4 things that matter usability
- 38. eternal truths
- 39. first eternal truth identity assurance cost and decreased usability your app’s assurance requirement “sweet” spot
- 40. costs too much
- 41. identity assurance session duration second eternal truth
- 42. not good enough
- 44. my career in heavy metal music
- 45. wristwatch
- 46. modern authentication requires adaptive and local biometrics
- 47. die darwin
- 48. adaptive origins
- 49. conventional primary authentication password smart card one-time password (OTP) SMS
- 50. device ID •____ •____ •____ IP blacklist •Bill pay $349 •Bill pay $610 •EFT $2,000,000 behavioral geolocation primary authentication
- 51. assurance over time identity assurance session duration higher assurance
- 52. modern adaptive
- 53. 53 degree of difficulty distance modern adaptive
- 54. primary adaptive adaptive server resources resources browser adaptive: traditional
- 55. adaptive: WAM (3) yes/no or risk score adaptive server (1) primary WAM policy enforcement point WAM policy decision point browser adaptive: WAM
- 56. (3) yes/no service provider identity provider adaptive server (1) primary browser adaptive: federation
- 57. resource server OpenID Provider authorization server user info endpoint client/relying party/app API
- 58. 58 client/relying party/ app client registration (admintime) OpenID Provider/ authorization server token refresh (runtime) resource server token presentation (runtime) frequency adaptive: API
- 59. mobile biometric
- 60. biometric reader in every pocket
- 61. adaptive enhanced device ID A privacy playlists
- 63. first new eternal truth identity assurance cost and decreased usability app requirement
- 64. first new eternal truth identity assurance cost and decreased usability app requirement
- 65. identity assurance session duration second new eternal truth app requirement
- 66. identity assurance session duration second new eternal truth app requirement
- 67. identity assurance session duration continuous: our best aspiration continuous app requirement
- 68. heterogeneous, distant, continuous authentication?
- 70. layer authentication techniques to raise assurance
- 71. plan for multiple authentication types
- 72. get your proofing right
- 73. identity assurance password mobile smart card proofing matters proofing
- 74. tune your engine