SlideShare a Scribd company logo
1 of 23
@lhazlewood | @goStormpath
Instant Security
& Scalable User Management
with Spring Boot
Les Hazlewood @lhazlewood
Apache Shiro Project Chair
CTO, Stormpath stormpath.com
@lhazlewood | @goStormpath
Spring Security
• Authentication
• Authorization
• Enforcement
• No user management
@lhazlewood | @goStormpath
You’re on the hook for:
• Data store integration
• Data modeling
• HTML pages
• CSRF view support
• Email verification
• Forgot password
• Oauth2 / Social setup
• SAML coordination
• Crypto choices
• Multi-factor auth
• Scale / growth
• SaaS Multi-Tenancy
• Mobile auth strategy
• Microservice auth
• Best practices
• ...etc...
@lhazlewood | @goStormpath
Traditional Application
Your
Application
Users
@lhazlewood | @goStormpath
What about new stores?
Users LDAP/AD
Your
Application
@lhazlewood | @goStormpath
And legacy migration?
Legacy
Users
LDAP/AD
New
Users
Your
Application
@lhazlewood | @goStormpath
And Social?
Legacy
Users
LDAP/AD
Google
Apps
Facebook GitHub
New
Users
Your
Application
@lhazlewood | @goStormpath
And SSO/SAML?
Legacy
Users
LDAP/AD
Google
Apps
Facebook GitHub
New
Users
Your
Application
Ping
Okta
Azure
ADFS
Oracle
SSO
SiteMinder
LinkedIn
OneLogin
@lhazlewood | @goStormpath
And Multi-Tenant / SaaS ?
Legacy
Users
LDAP/AD
Google
Apps
Facebook GitHub
New
Users
Your
Application
Ping
Okta
Azure
ADFS
Oracle
SSO SiteMinder LinkedIn
OneLogin
Customer A
Customer C
Customer F
Customer B
Customer D Customer E
Customer G
@lhazlewood | @goStormpath
Oh the Hue Manatee!
@lhazlewood | @goStormpath
Stormpath takes you from this...
Legacy
Users
LDAP/AD
Google
Apps
Facebook GitHub
New
Users
Your
Application
Ping
Okta
Azure
ADFS
Oracle
SSO SiteMinder LinkedIn
OneLogin
Customer A
Customer C
Customer F
Customer B
Customer D Customer E
Customer G
@lhazlewood | @goStormpath
To this...
Your
Application
@lhazlewood | @goStormpath
To this...
Your
Application
Your
Application
Your
Application
Your
Application
...
@lhazlewood | @goStormpath
But much more than a backend
• Application SDKs
• Framework Integrations
• Best practices
@lhazlewood | @goStormpath
Live Demo Time!
@lhazlewood | @goStormpath
Pages & Workflows
@lhazlewood | @goStormpath
SSO & Social
@lhazlewood | @goStormpath
OAuth & Mobile
@lhazlewood | @goStormpath
Flexible Authorization
@lhazlewood | @goStormpath
Application
Servlet Filters
How does it work?
Spring Security Stormpath MVC
Stormpath SDK
...
@lhazlewood | @goStormpath
Stormpath works hard for you
• Java SDK 1.0.0 released last Tuesday!
• SDK + Integration Effort: ~ 8 man years
• Extreme customizability
• Automatic defaults
• Often no code required
@lhazlewood | @goStormpath
Thank You!
• les@stormpath.com
• Twitter: @lhazlewood
• https://stormpath.com
@lhazlewood | @goStormpath
Spring Boot Resources
• Spring Boot Stormpath Web Starter
https://docs.stormpath.com/java/spring-boot-web/
• Simple Web App with Spring Boot, Spring Security, and Stormpath
https://stormpath.com/blog/build-spring-boot-spring-security-app
• Github Stormpath Spring Boot Tutorial
https://github.com/stormpath/stormpath-spring-boot-tutorial

More Related Content

What's hot

Search Friendly Web Apps
Search Friendly Web AppsSearch Friendly Web Apps
Search Friendly Web Apps
Nikhil Kothari
 
SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)
SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)
SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)
Richard Harbridge
 
SharePoint Saturday - Information Architecture Design
SharePoint Saturday - Information Architecture DesignSharePoint Saturday - Information Architecture Design
SharePoint Saturday - Information Architecture Design
Jim Duncan
 
Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365
Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365
Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365
Shahzad S
 

What's hot (20)

SharePoint 2013 ediscovery overview
SharePoint 2013 ediscovery overviewSharePoint 2013 ediscovery overview
SharePoint 2013 ediscovery overview
 
Is BCS Dead?
Is BCS Dead?Is BCS Dead?
Is BCS Dead?
 
SPUnite17 The New Enterprise Content Management
SPUnite17 The New Enterprise Content ManagementSPUnite17 The New Enterprise Content Management
SPUnite17 The New Enterprise Content Management
 
How to build your own Delve: combining machine learning, big data and SharePoint
How to build your own Delve: combining machine learning, big data and SharePointHow to build your own Delve: combining machine learning, big data and SharePoint
How to build your own Delve: combining machine learning, big data and SharePoint
 
SpiderIT_presentation
SpiderIT_presentationSpiderIT_presentation
SpiderIT_presentation
 
Self-service data preparation for AI & Data Science
Self-service data preparation for AI & Data ScienceSelf-service data preparation for AI & Data Science
Self-service data preparation for AI & Data Science
 
SPSKC Machine Learning in SharePoint
SPSKC Machine Learning in SharePointSPSKC Machine Learning in SharePoint
SPSKC Machine Learning in SharePoint
 
Search Friendly Web Apps
Search Friendly Web AppsSearch Friendly Web Apps
Search Friendly Web Apps
 
SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)
SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)
SharePoint 2007 and SharePoint 2010 for Web Content Management (WCM)
 
SharePoint Saturday - Information Architecture Design
SharePoint Saturday - Information Architecture DesignSharePoint Saturday - Information Architecture Design
SharePoint Saturday - Information Architecture Design
 
B365 saturday practical guide to building a scalable search architecture in s...
B365 saturday practical guide to building a scalable search architecture in s...B365 saturday practical guide to building a scalable search architecture in s...
B365 saturday practical guide to building a scalable search architecture in s...
 
SPSBE building an faq for end users
SPSBE building an faq for end usersSPSBE building an faq for end users
SPSBE building an faq for end users
 
Introduction à Application Insights
Introduction à Application InsightsIntroduction à Application Insights
Introduction à Application Insights
 
Max Prin - MnSearch Summit 2017 - What does technical SEO look like in 2017?
Max Prin - MnSearch Summit 2017 - What does technical SEO look like in 2017?Max Prin - MnSearch Summit 2017 - What does technical SEO look like in 2017?
Max Prin - MnSearch Summit 2017 - What does technical SEO look like in 2017?
 
Quick start guide to java script frameworks for sharepoint apps spsbe-2015
Quick start guide to java script frameworks for sharepoint apps spsbe-2015Quick start guide to java script frameworks for sharepoint apps spsbe-2015
Quick start guide to java script frameworks for sharepoint apps spsbe-2015
 
Webinar: Personalized Retail Search & Recommendations with Fusion
Webinar: Personalized Retail Search & Recommendations with FusionWebinar: Personalized Retail Search & Recommendations with Fusion
Webinar: Personalized Retail Search & Recommendations with Fusion
 
Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365
Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365
Implementing BCS-Business Connectivity Services - Sharepoint 2013- Office 365
 
GraphQL or RESTful
GraphQL or RESTfulGraphQL or RESTful
GraphQL or RESTful
 
SharePoint Document Management
SharePoint Document ManagementSharePoint Document Management
SharePoint Document Management
 
The API-Application Semantic Gap
The API-Application Semantic GapThe API-Application Semantic Gap
The API-Application Semantic Gap
 

Viewers also liked

Cauchi Melissa Capstone Draft 4
Cauchi Melissa Capstone Draft 4Cauchi Melissa Capstone Draft 4
Cauchi Melissa Capstone Draft 4
Melissa Cauchi
 
PP-Final2
PP-Final2PP-Final2
PP-Final2
Jane Wu
 
Pitch Letter One Heart - FINAL
Pitch Letter One Heart - FINALPitch Letter One Heart - FINAL
Pitch Letter One Heart - FINAL
Justin Ullestad
 

Viewers also liked (14)

Stormpath 101: Spring Boot + Spring Security
Stormpath 101: Spring Boot + Spring SecurityStormpath 101: Spring Boot + Spring Security
Stormpath 101: Spring Boot + Spring Security
 
Spring Boot Authentication...and More!
Spring Boot Authentication...and More! Spring Boot Authentication...and More!
Spring Boot Authentication...and More!
 
Managing user's data with Spring Session
Managing user's data with Spring SessionManaging user's data with Spring Session
Managing user's data with Spring Session
 
Savon d'olio
Savon d'olio Savon d'olio
Savon d'olio
 
Cauchi Melissa Capstone Draft 4
Cauchi Melissa Capstone Draft 4Cauchi Melissa Capstone Draft 4
Cauchi Melissa Capstone Draft 4
 
PP-Final2
PP-Final2PP-Final2
PP-Final2
 
Mani resume
Mani resumeMani resume
Mani resume
 
這就是台灣的體育協會 part.1
這就是台灣的體育協會 part.1這就是台灣的體育協會 part.1
這就是台灣的體育協會 part.1
 
Презентация Высоцкий
Презентация ВысоцкийПрезентация Высоцкий
Презентация Высоцкий
 
Pitch Letter One Heart - FINAL
Pitch Letter One Heart - FINALPitch Letter One Heart - FINAL
Pitch Letter One Heart - FINAL
 
CV Lukas 20161216
CV Lukas 20161216CV Lukas 20161216
CV Lukas 20161216
 
Ecoregion chocó darién flora
Ecoregion chocó darién floraEcoregion chocó darién flora
Ecoregion chocó darién flora
 
Gdi presentation eng
Gdi presentation engGdi presentation eng
Gdi presentation eng
 
Protocolo de investigación
Protocolo de investigación Protocolo de investigación
Protocolo de investigación
 

Similar to Instant Security and User Management in Spring Boot

Techniques for scaling application with security and visibility in cloud
Techniques for scaling application with security and visibility in cloudTechniques for scaling application with security and visibility in cloud
Techniques for scaling application with security and visibility in cloud
Akshay Mathur
 
cloud session uklug
cloud session uklugcloud session uklug
cloud session uklug
dominion
 

Similar to Instant Security and User Management in Spring Boot (20)

DataCanvas: Big Data Analytic Flow in Cloud
DataCanvas: Big Data Analytic Flow in CloudDataCanvas: Big Data Analytic Flow in Cloud
DataCanvas: Big Data Analytic Flow in Cloud
 
SPS Chevy Chase Tips on migrating to Office 365
SPS Chevy Chase Tips on migrating to Office 365SPS Chevy Chase Tips on migrating to Office 365
SPS Chevy Chase Tips on migrating to Office 365
 
Techniques for scaling application with security and visibility in cloud
Techniques for scaling application with security and visibility in cloudTechniques for scaling application with security and visibility in cloud
Techniques for scaling application with security and visibility in cloud
 
SharePoint Tips and Tricks to avoid migration headaches
SharePoint Tips and Tricks to avoid migration headachesSharePoint Tips and Tricks to avoid migration headaches
SharePoint Tips and Tricks to avoid migration headaches
 
INTERFACE by apidays 2023 - GraphQL's second act, Jesse Martin, Hasura
INTERFACE by apidays 2023 - GraphQL's second act, Jesse Martin, HasuraINTERFACE by apidays 2023 - GraphQL's second act, Jesse Martin, Hasura
INTERFACE by apidays 2023 - GraphQL's second act, Jesse Martin, Hasura
 
Automating SharePoint Processes with Microsoft Flow - SPSBangalore
Automating SharePoint Processes with Microsoft Flow - SPSBangaloreAutomating SharePoint Processes with Microsoft Flow - SPSBangalore
Automating SharePoint Processes with Microsoft Flow - SPSBangalore
 
Rest + Oauth Integration by Lightning By Mohammed Rizwan
Rest + Oauth Integration by Lightning By Mohammed RizwanRest + Oauth Integration by Lightning By Mohammed Rizwan
Rest + Oauth Integration by Lightning By Mohammed Rizwan
 
The Ball Launch on 2013 Microsoft TechDays Part 1/2
The Ball Launch on 2013 Microsoft TechDays Part 1/2The Ball Launch on 2013 Microsoft TechDays Part 1/2
The Ball Launch on 2013 Microsoft TechDays Part 1/2
 
cloud session uklug
cloud session uklugcloud session uklug
cloud session uklug
 
Architect’s Open-Source Guide for a Data Mesh Architecture
Architect’s Open-Source Guide for a Data Mesh ArchitectureArchitect’s Open-Source Guide for a Data Mesh Architecture
Architect’s Open-Source Guide for a Data Mesh Architecture
 
SPS Toronto 2015
SPS Toronto 2015SPS Toronto 2015
SPS Toronto 2015
 
SharePoint Adoption Tactics - SPSPhilly
SharePoint Adoption Tactics - SPSPhillySharePoint Adoption Tactics - SPSPhilly
SharePoint Adoption Tactics - SPSPhilly
 
Using sharepoint to solve business problems #spsnairobi2014
Using sharepoint to solve business problems #spsnairobi2014Using sharepoint to solve business problems #spsnairobi2014
Using sharepoint to solve business problems #spsnairobi2014
 
#SPSOttawa introduction to the #microsoftGraph
#SPSOttawa introduction to the #microsoftGraph#SPSOttawa introduction to the #microsoftGraph
#SPSOttawa introduction to the #microsoftGraph
 
Building a New Platform for Customer Analytics
Building a New Platform for Customer Analytics Building a New Platform for Customer Analytics
Building a New Platform for Customer Analytics
 
Edge API BaaS Deep-Dive: Streamline app development
Edge API BaaS Deep-Dive: Streamline app developmentEdge API BaaS Deep-Dive: Streamline app development
Edge API BaaS Deep-Dive: Streamline app development
 
Architecting for Big Data: Trends, Tips, and Deployment Options
Architecting for Big Data: Trends, Tips, and Deployment OptionsArchitecting for Big Data: Trends, Tips, and Deployment Options
Architecting for Big Data: Trends, Tips, and Deployment Options
 
A6 big data_in_the_cloud
A6 big data_in_the_cloudA6 big data_in_the_cloud
A6 big data_in_the_cloud
 
Making Big Data Easy for Everyone
Making Big Data Easy for EveryoneMaking Big Data Easy for Everyone
Making Big Data Easy for Everyone
 
BAR360 open data platform presentation at DAMA, Sydney
BAR360 open data platform presentation at DAMA, SydneyBAR360 open data platform presentation at DAMA, Sydney
BAR360 open data platform presentation at DAMA, Sydney
 

Recently uploaded

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Safe Software
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 

Recently uploaded (20)

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...
Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...
Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...
 
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWEREMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
 
MS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectorsMS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectors
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
 
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ..."I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 
AXA XL - Insurer Innovation Award Americas 2024
AXA XL - Insurer Innovation Award Americas 2024AXA XL - Insurer Innovation Award Americas 2024
AXA XL - Insurer Innovation Award Americas 2024
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu
Apidays Singapore 2024 - Modernizing Securities Finance by Madhu SubbuApidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu
Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptx
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 

Instant Security and User Management in Spring Boot

Editor's Notes

  1. Pages & Workflows SSO & Social OAuth & Mobile Flexible Authorization