Prabath Siriwardena's work on SCIM and provisioning standards

•

2 likes•1,108 views

Prabath Siriwardena

Open Standard Based identity Provisioning System for Cloud @ Identity.Next 2012 - Netherlands.

Education

Prabath Siriwardena
(@prabath)
Senior Software Architect

2012
:
SCIM
1.1

2011
:
SCIM
1.0

2011
:
RESTPML

2010
:
SCIM
community

2006
:
SPML
2.0

2003
:
SPML
1.0

2003
:
WS-‐Provisioning

2001
:
OASIS
PS
TC

/Users

SCIM
Service

Provider

SCIM
Consumer
/Groups

add-‐user.json

{

"schemas":[],

"name":{"familyName":”siriwardena","givenName":”prabath"},

"userName":”prabath","password":”prabath123",

"emails":[{"primary":true,"value":”prabath@yahoo.com","type":"home"},

{"value":”prabath@wso2.com","type":"work"}]

}

curl
command

curl
-‐v
-‐k
-‐-‐user
admin:admin
-‐d
@add-‐user.json
-‐-‐header
"Content-‐Type:application/json"

https://localhost:9443/wso2/scim/Users

add-‐group.json

{

"schemas":
["urn:scim:schemas:core:1.0"],

"id":
"idnext",

"displayName":
"IdentityNext",

}

curl
command

curl
-‐v
-‐k
-‐-‐user
admin:admin
-‐d
@add-‐group.json
-‐-‐header
"Content-‐Type:application/
json"
https://localhost:9443/wso2/scim/Groups

Domain
A

Provisioning
Service Provisioning
Provider Service
Provider

Domain
B

Provisioning
Service
SCIM
Consumer
Provider
Domain
C

One

way
provisioning

Domain
A

Provisioning
Service Provisioning
Provider Service
Provider

Domain
B

Provisioning
SCIM
Consumer

Service
Provider
Domain
C

One
way
provisioning
with
broker
mode

Domain
A

Provisioning SCIM
Consumer

Service Provisioning
Provider Service
Provider

Domain
B

Provisioning
SCIM
Consumer
Service
Provider
Domain
C

SCIM
Consumer

Bi-‐directional
provisioning

Domain
A

Provisioning SCIM
Consumer

Service Provisioning
Provider Service
Provider

Provisioning
Service
Provider

Domain
B

Provisioning
SCIM
Consumer
Service
Provider
Domain
C

SCIM
Consumer

Multi-‐directional
provisioning
with
a
centralized
PSP

Domain
A

Provisioning 3 SAML2 IdP
Service
Provider
2
4 1

Domain
B

Just-‐in-‐time
provisioning
with
SAML2

Domain
A

4

Provisioning 3 SAML2 IdP
Service
Provider
2
5 1

Domain
B

Just-‐in-‐time
provisioning
with
SAML2

Provisioning
Service
Provider

facilelogin.com

wso2.com

SCIM
Consumer
(wso2.com)

SCIM
Consumer
(facilelogin.com)

OAuth 2.0
Authorization
Server

Bearer
Token
Provisioning
Service
Provider

SCIM
Consumer

OAuth 2.0
Authorization
Server
Validate()

Bearer
Token
Provisioning
Service
Provider

SCIM
Consumer

Resource

Action

Resource

Owner

Client
Scope

Provisioning
Service
Provider

SCIM
Consumer

OAuth 2.0
Authorization
Server
Validate()

XACML

Request

Permit/
Provisioning
Deny/…

Service
Provider

SCIM
Consumer

XACML PDP

Prabath Siriwardena's work on SCIM and provisioning standards

What's hot

Fleet presentationeFM srl

Traffic Revenues DecouplingRemus Sepp

Internet VOD: meeting consumer demandsValue Partners

Dedicated Hosting Service Agreementwebhostingguy

Seserv workshop manos dramitinos - tussle analysis from etics projectictseserv

Managed Hosting for Dynamic Enterpriseswebhostingguy

English presentationeFM srl

65173 caroline county-rate_indigoMatthew Rathbun

Viestinnän seminaari 8.11.2012 / ExchangeSalcom Group

Sc Physics 2 12 9 09 Webinar Final Webguest92278a

En tv article_for_3gpp_web_site_v8Saurabh Verma

ReDeSign – FP7 Project for Cable IndustryMASIT MACEDONIA

Atomf ovEdisson Xavier Bayas Moposita

Greener hostinGwebhostingguy

Costing Model for Postal ServicesRafael Gonzalez Galarreta

The NGN Test Centre Infrastructure & Services - Shane Dempsey (NGN Test Centre)NGN Test Centre

Descritivo tShah Arafat

Transrating_Efficiencyaniruddh Tyagi

What's hot (18)

Fleet presentation

Traffic Revenues Decoupling

Internet VOD: meeting consumer demands

Dedicated Hosting Service Agreement

Seserv workshop manos dramitinos - tussle analysis from etics project

Managed Hosting for Dynamic Enterprises

English presentation

65173 caroline county-rate_indigo

Viestinnän seminaari 8.11.2012 / Exchange

Sc Physics 2 12 9 09 Webinar Final Web

En tv article_for_3gpp_web_site_v8

ReDeSign – FP7 Project for Cable Industry

Atomf ov

Greener hostinG

Costing Model for Postal Services

The NGN Test Centre Infrastructure & Services - Shane Dempsey (NGN Test Centre)

Descritivo t

Transrating_Efficiency

Viewers also liked

WSO2 CharonHasiniG

SCIM in the Real World: Adoption is GrowingKelly Grizzle

SCIM 2.0 - Choose your own identity adventureKelly Grizzle

SCIM: Why It’s More Important, and More Simple, Than You Think - CIS 2014Kelly Grizzle

Standardizing Identity Provisioning with SCIMHasiniG

Master IAM in the Cloud with SCIM v2.0Kelly Grizzle

Security in PracticePrabath Siriwardena

Scim overviewMorteza Ansari

Jan19 scim webinar-04Paul Madsen

Towards a Federated Cloud EcosystemClovis Chapman

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014Nov Matake

Viewers also liked (11)

WSO2 Charon

SCIM in the Real World: Adoption is Growing

SCIM 2.0 - Choose your own identity adventure

SCIM: Why It’s More Important, and More Simple, Than You Think - CIS 2014

Standardizing Identity Provisioning with SCIM

Master IAM in the Cloud with SCIM v2.0

Security in Practice

Scim overview

Jan19 scim webinar-04

Towards a Federated Cloud Ecosystem

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014

Similar to Prabath Siriwardena's work on SCIM and provisioning standards

Är du molnklar?IBM Sverige

OSGi Remote Services With Scamfrancis

Ciscounifiedservicedeliverylaunchmay2009final 090512004229-phpapp01Newlink

Sdf Panel Nice 2009 V1.0lgradina

Video service assurance across hybrid transport networksGlobal MarCom & LeadGen

Cloud Computing Why, What, HowKennisportal

Towards Semantic Interoperability of Graphical DSMLs for Telecommunications S...Vanea Chiprianov

Cloud congress 2012_herbert_wanner_cisco_v3Herbert Wanner

Unlocking the Value of Delivering Services Event – Monday 18th March 2013 – S...Arrow ECS UK

Sao Paulo Multi-network Event 2012 - VerimatrixVerimatrix

Innovis Company Overview (January 2012)Innovis_careers

Global Video NetworksKConaulty

Metrocom: first telco billing built on oracle brm - Alexey Gamburg, Sergey Ta...ORACLE USER GROUP ESTONIA

Mile Gate For Pto NetworksMike Fisher

Next Generation Video Services FundamentalsCisco Canada

2012.11.20 - Managed Service Providers - RV des Experts du Club Cloud des Par...Club Cloud des Partenaires

PHP Day 2011 PHP goes to the cloudpietrobr

Don't Lose Your Viewers: Keep Their Attention With High Performance StreamingCompuware APM

Tsring-hua University Workshop File 2 of 2 12/07/12Stephen Kwan

Similar to Prabath Siriwardena's work on SCIM and provisioning standards (19)

Är du molnklar?

OSGi Remote Services With Sca

Ciscounifiedservicedeliverylaunchmay2009final 090512004229-phpapp01

Sdf Panel Nice 2009 V1.0

Video service assurance across hybrid transport networks

Cloud Computing Why, What, How

Towards Semantic Interoperability of Graphical DSMLs for Telecommunications S...

Cloud congress 2012_herbert_wanner_cisco_v3

Unlocking the Value of Delivering Services Event – Monday 18th March 2013 – S...

Sao Paulo Multi-network Event 2012 - Verimatrix

Innovis Company Overview (January 2012)

Global Video Networks

Metrocom: first telco billing built on oracle brm - Alexey Gamburg, Sergey Ta...

Mile Gate For Pto Networks

Next Generation Video Services Fundamentals

2012.11.20 - Managed Service Providers - RV des Experts du Club Cloud des Par...

PHP Day 2011 PHP goes to the cloud

Don't Lose Your Viewers: Keep Their Attention With High Performance Streaming

Tsring-hua University Workshop File 2 of 2 12/07/12

Recently uploaded

CARE OF CHILD IN INCUBATOR..........pptxGaneshChakor2

Mattingly "AI & Prompt Design: Structured Data, Assistants, & RAG"National Information Standards Organization (NISO)

Z Score,T Score, Percential Rank and Box Plot GraphThiyagu K

Q4-W6-Restating Informational Text Grade 3JemimahLaneBuaron

JAPAN: ORGANISATION OF PMDA, PHARMACEUTICAL LAWS & REGULATIONS, TYPES OF REGI...anjaliyadav012327

SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptxiammrhaywood

microwave assisted reaction. General introductionMaksud Ahmed

Measures of Central Tendency: Mean, Median and ModeThiyagu K

Advance Mobile Application Development class 07Dr. Mazin Mohamed alkathiri

Paris 2024 Olympic Geographies - an activityGeoBlogs

APM Welcome, APM North West Network Conference, Synergies Across SectorsAssociation for Project Management

Accessible design: Minimum effort, maximum impactdawncurless

mini mental status format.docxPoojaSen20

BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...Sapna Thakur

Mastering the Unannounced Regulatory InspectionSafetyChain Software

A Critique of the Proposed National Education Policy ReformChameera Dedduwage

The Most Excellent Way | 1 Corinthians 13Steve Thomason

Introduction to Nonprofit Accounting: The BasicsTechSoup

Measures of Dispersion and Variability: Range, QD, AD and SDThiyagu K

Grant Readiness 101 TechSoup and Remy ConsultingTechSoup

Recently uploaded (20)

CARE OF CHILD IN INCUBATOR..........pptx

Mattingly "AI & Prompt Design: Structured Data, Assistants, & RAG"

Z Score,T Score, Percential Rank and Box Plot Graph

Q4-W6-Restating Informational Text Grade 3

JAPAN: ORGANISATION OF PMDA, PHARMACEUTICAL LAWS & REGULATIONS, TYPES OF REGI...

SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptx

microwave assisted reaction. General introduction

Measures of Central Tendency: Mean, Median and Mode

Advance Mobile Application Development class 07

Paris 2024 Olympic Geographies - an activity

APM Welcome, APM North West Network Conference, Synergies Across Sectors

Accessible design: Minimum effort, maximum impact

mini mental status format.docx

BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...

Mastering the Unannounced Regulatory Inspection

A Critique of the Proposed National Education Policy Reform

The Most Excellent Way | 1 Corinthians 13

Introduction to Nonprofit Accounting: The Basics

Measures of Dispersion and Variability: Range, QD, AD and SD

Grant Readiness 101 TechSoup and Remy Consulting

Prabath Siriwardena's work on SCIM and provisioning standards

1. Prabath Siriwardena (@prabath) Senior Software Architect

9. 2012 : SCIM 1.1 2011 : SCIM 1.0 2011 : RESTPML 2010 : SCIM community 2006 : SPML 2.0 2003 : SPML 1.0 2003 : WS-‐Provisioning 2001 : OASIS PS TC

10.

11. /Users SCIM Service Provider SCIM Consumer /Groups

12. add-‐user.json { "schemas":[], "name":{"familyName":”siriwardena","givenName":”prabath"}, "userName":”prabath","password":”prabath123", "emails":[{"primary":true,"value":”prabath@yahoo.com","type":"home"}, {"value":”prabath@wso2.com","type":"work"}] } curl command curl -‐v -‐k -‐-‐user admin:admin -‐d @add-‐user.json -‐-‐header "Content-‐Type:application/json" https://localhost:9443/wso2/scim/Users

13. add-‐group.json { "schemas": ["urn:scim:schemas:core:1.0"], "id": "idnext", "displayName": "IdentityNext", } curl command curl -‐v -‐k -‐-‐user admin:admin -‐d @add-‐group.json -‐-‐header "Content-‐Type:application/ json" https://localhost:9443/wso2/scim/Groups

14.

15. Domain A Provisioning Service Provisioning Provider Service Provider Domain B Provisioning Service SCIM Consumer Provider Domain C One way provisioning

16. Domain A Provisioning Service Provisioning Provider Service Provider Domain B Provisioning SCIM Consumer Service Provider Domain C One way provisioning with broker mode

17. Domain A Provisioning SCIM Consumer Service Provisioning Provider Service Provider Domain B Provisioning SCIM Consumer Service Provider Domain C SCIM Consumer Bi-‐directional provisioning

18. Domain A Provisioning SCIM Consumer Service Provisioning Provider Service Provider Provisioning Service Provider Domain B Provisioning SCIM Consumer Service Provider Domain C SCIM Consumer Multi-‐directional provisioning with a centralized PSP

19. Domain A Provisioning 3 SAML2 IdP Service Provider 2 4 1 Domain B Just-‐in-‐time provisioning with SAML2

20. Domain A 4 Provisioning 3 SAML2 IdP Service Provider 2 5 1 Domain B Just-‐in-‐time provisioning with SAML2

21. Provisioning Service Provider facilelogin.com wso2.com SCIM Consumer (wso2.com) SCIM Consumer (facilelogin.com)

22. OAuth 2.0 Authorization Server Bearer Token Provisioning Service Provider SCIM Consumer

23. OAuth 2.0 Authorization Server Validate() Bearer Token Provisioning Service Provider SCIM Consumer

24. Resource Action Resource Owner Client Scope Provisioning Service Provider SCIM Consumer

25. OAuth 2.0 Authorization Server Validate() XACML Request Permit/ Provisioning Deny/… Service Provider SCIM Consumer XACML PDP

Prabath Siriwardena's work on SCIM and provisioning standards

Recommended

Recommended

More Related Content

What's hot

What's hot (18)

Viewers also liked

Viewers also liked (11)

Similar to Prabath Siriwardena's work on SCIM and provisioning standards

Similar to Prabath Siriwardena's work on SCIM and provisioning standards (19)

More from Prabath Siriwardena

More from Prabath Siriwardena (20)

Recently uploaded

Recently uploaded (20)

Prabath Siriwardena's work on SCIM and provisioning standards