Uploaded byPing Identity
Hitchhikers Guide to the Identiverse - How Federated Business will Rule the World
The document discusses the emergence of the identity industry, highlighting vulnerabilities in medical devices due to password issues, as warned by various federal agencies. It introduces the concept of the 'Identiverse,' a digital world where everything has an identity and emphasizes the importance of multifactor authentication, ubiquitous APIs, and federated access. Key tenets for advancing this emerging business landscape include eliminating passwords, automating processes, and enabling self-service.
More Related Content
Similar to Hitchhikers Guide to the Identiverse - How Federated Business will Rule the World
![[WSO2Con USA 2018] Identity is Eating the World!](https://cdn.slidesharecdn.com/ss_thumbnails/wso2con2018prabath-180718063646-thumbnail.jpg?width=640&height=640&fit=bounds)
Hitchhikers Guide to the Identiverse - How Federated Business will Rule the World
- 1. Click to editMaster title style Copyright ©2013 Ping Identity Corporation.All rights reserved.1
- 2. Copyright ©2012 PingIdentity Corporation.All rights reserved.2 HOW FEDERATED BUSINESS WILL RULE THE WORLD
- 3. THE IDENTITY INDUSTRYISABOUTTO EXPLODE
- 4.
- 5.
- 7. Trove of medicaldevices found to have password problems. Surgical devices, ventilators, defibrillators, and monitors are among the equipment at risk The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) at the Department of Homeland Security and the Food and Drug Administration (FDA) are warning that the vulnerability could allow attackers to change critical settings and modify firmware. ZDNet – 17 June 2013 http://zd.net/17j5RGY HEADLINES WE DON’T WANT TO SEE
- 8. Copyright ©2012 PingIdentity Corporation.All rights reserved.8 OURMISSION Network Applications IDENTITY
- 9. Identiverse (i-ˈden-tə-vərs) noun The Identiverse is a moreperfect digital world of people, applications, and devices that all recognize and interact with each other. When everything is identity-aware and access is ubiquitous, the Identiverse will provide superior security and freedom to realize the full potential of digital economy.
- 10. 1. Everything hasan identity (apps, devices, people) 2. Authentication is multifactor (and rarely passwords) 3. APIs are Ubiquitous 4. Standards are Everywhere 5. Access is Federated 6. Privacy is Possible SIX FUNDAMENTAL PILLARS OFTHE IDENTIVERSE
- 11. Copyright ©2012 PingIdentity Corporation.All rights reserved.11 IDENTIY IS ALWAYS ON Identity becomes portable, enabled via an identity services layer that is leveraged byALL applications… much like databases and the network are today.
- 12.
- 13. Secure Identity Layer EMERGINGBUSINESS LANDSCAPE Federated Business Mobile Ubiquity Social Integration Internet of Things
- 14. Secure Identity Layer EMERGINGBUSINESS LANDSCAPE Federated Business Mobile Ubiquity Social Integration Internet of Things
- 15. Federated Business Mobile Ubiquity Social Integration Internet of Things Secure IdentityLayer EMERGING BUSINESS LANDSCAPE
- 16. Federated Business Mobile Ubiquity Social Integration Internet of Things Secure IdentityLayer EMERGING BUSINESS LANDSCAPE
- 17. Federated Business Mobile Ubiquity Social Integration Internet of Things Secure IdentityLayer EMERGING BUSINESS LANDSCAPE
- 18. Mobile Ubiquity Social Integration Internet of Things Secure IdentityLayer EMERGING BUSINESS LANDSCAPE
- 19. FUNDAMENTAL TENETS TOSCALE • No more passwords • Automate as much as possible – Eliminate IT Administrative overhead – Application registration is dynamic • Ease of use – Effortless self service – Developer-friendly – IT-friendly – User-friendly
- 20. TODAY’S IDENTITY PROTOCOLLANDSCAPE SAML LDAP X.509
- 21. MODERN IDENTITY PROTOCOLSTACK OAuth 2.0
- 22. MODERN IDENTITY PROTOCOLSTACK OpenID Connect SCIM OAuth 2.0
- 23. Security for APIs API’SFOR IDENTITY OpenID Connect SCIM
- 24. Security for APIs UserAuthentication API API’S FOR IDENTITY SCIM
- 25. Security for APIs UserAuthentication API User Management API API’S FOR IDENTITY
- 26. Security for APIs UserAuthentication API User Management API API’S FOR IDENTITY (Not identity-enabled APIs)
- 27. WHAT IS ACTIONABLE? • Apps and devices need a modern identity protocol stack – Starts with Oauth 2.0, OpenID Connect and SCIM • No more passwords – Federated access by default • Ease of use means automate everything – Or enable self-service as a backup
- 28. Copyright ©2012 PingIdentity Corporation.All rights reserved.28 WHAT IS THE ANSWER TO THE ULTIMATE QUESTION OF LIFE,THE UNIVERSE AND EVERYTHING?
- 29. Click to editMaster title style Copyright ©2013 Ping Identity Corporation.All rights reserved.29 THANKYOU In the perfect digital world everything is identity-aware and access is ubiquitous. Help write the next chapter in the hitchhiker’s guide. HOW? Join Ping Identity’s hospitality suite and enjoy a Pan Galactic Gargle Blaster and use your NEW Up by Jawbone to log whether its effects are, “similar to having your brains smashed in by a slice of lemon wrapped round a large gold brick.” Tweet using hashtag #identiverse
Editor's Notes
- #3 Hitchhikers know everything exciting happens outside the lines, like cloud, mobile, social, big data and the internet of things.The challenge of navigating today’s universe is lack of portable, automated, discoverable and scalable identity management.DON’T PANIC. I’ll explain how a next-generation identity and access management layer encompassing the identity of:people and thingspassive analyticsactive feedbackand automated connections to partners, customers, and apps is the modern Hitchhiker’s Guide to the Identiverse.
- #4 As the collision of cloud-mobile-social grows to it’s inevitable conclusion, we are facing a massive explosion of internet endpoints, and a desperate future problem of securing and coordinating them.
- #5 Today we are at the “craftsman” stage of identity. Carefully constructed connections allow a small number of endpoints and users to be secured.
- #6 The future isexponential growth of
- #9 VINT CERF PUNTNEEDS TO BE HYBRID
- #12 This will be true of enterprise applications as well as (and more importantly) consumer applications. This is the path that Ping has started upon, and continues down. Consumerization of IT will likely drive consumer identity protocols into the enterprise – OpenID Connect being an example.
- #13 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcIdentity must become portable to drive ease of useInternet of Things - every thing has a unique identifier
- #14 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcInternet of Things
- #15 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcInternet of Things
- #16 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcInternet of Things
- #17 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcInternet of Things
- #18 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcInternet of Things
- #19 Highly dsitrbiuted nature of business – mobile, cloud, SaaS, outsorcing, PaaS, IaaSetcInternet of Things
- #22 Modern Identity LandscapeTargeted at Application developersLearnt from previous attempts
- #23 Two pillars of scalable modern identity: SCIM and OIDCOIDC is crucial for modern identity IdP discovery – important as number of IdPS increase in the modern identity era.Applicaton registration. Provides a mechanism ernidetntiy. Scale: to enable applications (be they on mobile devices or web applications) to act on behalf of the user to do things.Finally delivers SSO via ID token for native devices (pivot to OAuth).SCIMAuthorization and SSO isn’t possible without a provisioning event. aaS vendors have service level agreements that preclude the use of the enterprise identity store. The current insanity vis-à-vis proprietary provisioning won’t scale. SCIM is modern (REST-based) and is our last best hope at scalable provisioning because it delivers a standards-based approach.
- #24 OpenID ConnectAuthentication API (also enables SSO)Developer calls GetUserInfo API EndpointReplace Login.jsp and the Password DBFederated Domain, Single Domains, whateverSCIMUser Management APICreate, Read, Update, DeleteDeveloper exposes API to Add, Change & Delete user accounts
- #25 OpenID ConnectAuthentication API (also enables SSO)Developer calls GetUserInfo API EndpointReplace Login.jsp and the Password DBFederated Domain, Single Domains, whateverSCIMUser Management APICreate, Read, Update, DeleteDeveloper exposes API to Add, Change & Delete user accounts
- #26 OpenID ConnectAuthentication API (also enables SSO)Developer calls GetUserInfo API EndpointReplace Login.jsp and the Password DBFederated Domain, Single Domains, whateverSCIMUser Management APICreate, Read, Update, DeleteDeveloper exposes API to Add, Change & Delete user accounts
- #27 Two pillars of scalable modern identity: SCIM and OIDCNot Identity Enabled API’sSCIMAuthorization and SSO isn’t possible without a provisioning event. aaS vendors have service level agreements that preclude the use of the enterprise identity store. The current insanity vis-à-vis proprietary provisioning won’t scale. SCIM is modern (REST-based) and is our last best hope at scalable provisioning because it delivers a standards-based approach.OIDC is crucial for modIdP discovery – important as number of IdpS increase in the modern identity era.Client registration. Provides a mechanism ernidetntiy. Scale:to enable applications (be they on mobile devices or web applications) to act on behalf of the user to do things.Finally delivers SSO via ID token for native devices (pivot to OAuth).Interesting crossover and linkage b/w SCIM SP and OIDC user info endpoint. Different. I’ll be working in the IETF group on this (with John’s guidance). I’ll have diagrams for CIS.